Lucene search

K
wpvulndbWpvulndbWPVDB-ID:95595766-D535-43CC-9655-6B7D3018C5E1
HistoryApr 04, 2023 - 12:00 a.m.

Comment Reply Notification <= 1.4 - Cross-Site Request Forgery

2023-04-0400:00:00
wpscan.com
2
cross-site request forgery
software
nonce validation

0.001 Low

EPSS

Percentile

24.3%

The plugin does not properly validate requests use nonces, leading to a Cross-Site Request Forgery (CSRF) vulnerability.

CPENameOperatorVersion
comment-reply-notificationeq*

0.001 Low

EPSS

Percentile

24.3%

Related for WPVDB-ID:95595766-D535-43CC-9655-6B7D3018C5E1