Lucene search
WpvulndbWPVDB-ID:A9F1A99E-A29F-4B13-822C-05097F2EBA1DHistoryNov 16, 2021 - 12:00 a.m.
Push Notifications for WordPress (Lite) < 6.0.1 - Settings Update via CSRF
2021-11-1600:00:00
wpscan.com
7
0.003 Low
EPSS
Percentile
65.6%
The plugin is lacking CSRF checks in some of its function, for example when saving its settings, which could allow attackers to make a logged in admin change them
| CPE | Name | Operator | Version |
|---|---|---|---|
| push-notifications-for-wp | lt | 6.0.1 |
References
Related
cvelist
cvelist
CVE-2021-20846
2021-11-24 08:25:48
cve
cve
CVE-2021-20846
2021-11-24 16:15:13
nvd
nvd
CVE-2021-20846
2021-11-24 16:15:13
jvn
jvn
patchstack
patchstack
prion
prion
Cross site request forgery (csrf)
2021-11-24 16:15:00