Lucene search
Daniel RufWPVDB-ID:9EBB8318-EBAF-4DE7-B337-C91327685A43HistorySep 29, 2022 - 12:00 a.m.
LBStopAttack < 1.1.3 - Arbitrary Settings Update via CSRF
2022-09-2900:00:00
Daniel Ruf
wpscan.com
6
lbstopattack
csrf
settings
nonces
protection
poc
plugin
0.001 Low
EPSS
Percentile
34.1%
The plugin does not use nonces when saving its settings, making it possible for attackers to conduct CSRF attacks. This could allow attackers to disable the plugin’s protections.
PoC
| CPE | Name | Operator | Version |
|---|---|---|---|
| lbstopattack | lt | 1.1.3 |
Related
prion
prion
Cross site request forgery (csrf)
2022-10-25 17:15:00
cve
cve
CVE-2022-3097
2022-10-25 17:15:56
cvelist
cvelist
CVE-2022-3097 LBStopAttack < 1.1.3 - Arbitrary Settings Update via CSRF
2022-10-25 00:00:00
patchstack
patchstack
wpexploit
wpexploit
LBStopAttack < 1.1.3 - Arbitrary Settings Update via CSRF
2022-09-29 00:00:00
nvd
nvd
CVE-2022-3097
2022-10-25 17:15:56