DeepL Pro API translation < 2.4.1.2 - Log Pruning via CSRF

2023-11-2300:00:00

wpscan.com

plugin

csrf checks

pruning logs

attackers

logged in admins

csrf attack

security

6.8 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

24.3%

JSON

Description The plugin does not have CSRF checks when pruning logs, which could allow attackers to make logged in admins perform such action via a CSRF attack

CPENameOperatorVersion
eq2.4.1.2

CPE	Name	Operator	Version
		eq	2.4.1.2

References

www.wordfence.com/threat-intel/vulnerabilities/id/b60cb1af-c9f3-4cea-9699-d66a52eb87eb