Block for Font Awesome < 1.4.1 -Settings Update via CSRF

2023-12-0900:00:00

wpscan.com

font awesome

plugin

csrf

vulnerability

AI Score

8.9

Confidence

High

EPSS

0.001

Percentile

24.1%

JSON

Description The plugin does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack

References

patchstack.com/database/vulnerability/block-for-font-awesome/wordpress-block-for-font-awesome-plugin-1-3-3-cross-site-request-forgery-csrf-vulnerability