Lucene search

K
wpvulndbWpvulndbWPVDB-ID:818AD264-03AB-4BEE-B597-957F05432940
HistoryNov 10, 2023 - 12:00 a.m.

TS Webfonts for さくらのレンタルサーバ < 3.1.3 - Font Settings Change via CSRF

2023-11-1000:00:00
wpscan.com
ts webfonts
webfont security
csrf vulnerability
cross-site request forgery
security flaw
logged-in user
attack vector

6.5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

26.8%

Description The plugin does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks

CPENameOperatorVersion
ts-webfonts-for-sakuraeq3.1.3

6.5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

26.8%

Related for WPVDB-ID:818AD264-03AB-4BEE-B597-957F05432940