Lucene search

K
wpvulndbWpvulndbWPVDB-ID:9656ECBC-FA85-4C61-9BDA-BF21DA87C374
HistoryOct 17, 2023 - 12:00 a.m.

AGP Font Awesome Collection <= 3.2.4 - Arbitrary Settings Update via CSRF

2023-10-1700:00:00
wpscan.com
10
plugin
csrf checks
logged in users
unwanted actions
csrf attacks

AI Score

6.5

Confidence

High

EPSS

0.001

Percentile

24.2%

Description The plugin does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks

AI Score

6.5

Confidence

High

EPSS

0.001

Percentile

24.2%

Related for WPVDB-ID:9656ECBC-FA85-4C61-9BDA-BF21DA87C374