Lucene search
WpvulndbWPVDB-ID:A301120E-F727-4ECF-9D09-60DB04940EF7HistoryOct 10, 2023 - 12:00 a.m.
WP-dTree <= 4.4.5 - Settings Update via CSRF
2023-10-1000:00:00
wpscan.com
6
wordpress
wp-dtree
csrf
vulnerability
settings update
security
Description The plugin does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack
Related
cve
cve
CVE-2023-41667
2023-10-09 18:15:10
vulnrichment
vulnrichment
nvd
nvd
CVE-2023-41667
2023-10-09 18:15:10
prion
prion
Cross site request forgery (csrf)
2023-10-09 18:15:00
cvelist
cvelist
wordfence
wordfence
AI Score
6.4
Confidence
High
EPSS
0.001
Percentile
24.1%
Related for WPVDB-ID:A301120E-F727-4ECF-9D09-60DB04940EF7