Lucene search

K
wpvulndbWpvulndbWPVDB-ID:86DC5B94-C64A-4B12-80E7-814532C7B88D
HistoryOct 09, 2023 - 12:00 a.m.

Table of Contents Plus < 2309 - Settings Update via CSRF

2023-10-0900:00:00
wpscan.com
2
csrf attack
plugin vulnerability
admin access

AI Score

6.9

Confidence

High

EPSS

0.001

Percentile

24.1%

Description The plugin does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack

AI Score

6.9

Confidence

High

EPSS

0.001

Percentile

24.1%

Related for WPVDB-ID:86DC5B94-C64A-4B12-80E7-814532C7B88D