Lucene search
WpvulndbWPVDB-ID:855358F5-E464-4955-99E4-279F6AA0316FHistoryOct 20, 2023 - 12:00 a.m.
BEAR for WordPress < 1.1.4 - Arbitrary Settings Update via CSRF
2023-10-2000:00:00
wpscan.com
3
wordpress
csrf
security
plugin
attackers
logged in users
Description The plugin does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks
| CPE | Name | Operator | Version |
|---|---|---|---|
| eq | 1.1.4 |
Related
cve
cve
CVE-2023-4938
2023-10-18 08:15:08
cvelist
cvelist
CVE-2023-4938
2023-10-18 07:31:17
nvd
nvd
CVE-2023-4938
2023-10-18 08:15:08
prion
prion
Authorization
2023-10-18 08:15:00
wordfence
wordfence
6.5 Medium
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
20.3%
Related for WPVDB-ID:855358F5-E464-4955-99E4-279F6AA0316F