Lucene search

K
wpvulndbWpvulndbWPVDB-ID:8BF2529A-3FC3-47BB-959A-1F97BD6E4EC1
HistoryNov 09, 2022 - 12:00 a.m.

WPML < 4.5.14 - CSRF

2022-11-0900:00:00
wpscan.com
19
wpml
plugin
csrf
vulnerability
attackers
hijack
user
actions

EPSS

0.001

Percentile

32.3%

The plugin does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks such as change the status of a translation job

EPSS

0.001

Percentile

32.3%

Related for WPVDB-ID:8BF2529A-3FC3-47BB-959A-1F97BD6E4EC1