Korea SNS <= 1.6.4 - Settings Update via CSRF

2023-11-2300:00:00

wpscan.com

korea sns

csrf attack

settings update

AI Score

8.5

Confidence

High

EPSS

0.001

Percentile

24.1%

JSON

Description The plugin does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack

References

patchstack.com/database/vulnerability/korea-sns/wordpress-korea-sns-plugin-1-6-3-cross-site-request-forgery-csrf-vulnerability