Lucene search

K
wpvulndbWpvulndbWPVDB-ID:AB651202-D51D-446D-A6B8-F86D129990AC
HistoryOct 17, 2023 - 12:00 a.m.

Constant Contact Forms by MailMunch < 2.0.11 - Arbitrary Settings Update via CSRF

2023-10-1700:00:00
wpscan.com
5
plugin
csrf checks
logged in users
unwanted actions

AI Score

7

Confidence

High

EPSS

0.001

Percentile

24.2%

Description The plugin does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks

AI Score

7

Confidence

High

EPSS

0.001

Percentile

24.2%

Related for WPVDB-ID:AB651202-D51D-446D-A6B8-F86D129990AC