Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
wpvulndbWpvulndbWPVDB-ID:AC895F6B-F79C-4B38-8ED7-63A5F6D876CA
HistorySep 01, 2022 - 12:00 a.m.

Captcha Code < 2.8 - Settings Update via CSRF

2022-09-0100:00:00
wpscan.com
5

0.001 Low

EPSS

Percentile

32.0%

JSON

The plugin does not have CSRF check when saving its settings, which could allow attackers to make a logged in admin update them via a CSRF attack

CPENameOperatorVersion
captcha-code-authenticationlt2.8

Related

cvelist 1
prion 1
cve 1
patchstack 1
nvd 1
cvelist
cvelist
CVE-2022-37411 WordPress Captcha Code plugin <= 2.7 - Cross-Site Request Forgery (CSRF) vulnerability
2022-09-01 00:00:00
prion
prion
Cross site request forgery (csrf)
2022-09-09 15:15:00
cve
cve
CVE-2022-37411
2022-09-09 15:15:13
patchstack
patchstack
WordPress Captcha Code plugin <= 2.7 - Cross-Site Request Forgery (CSRF) vulnerability leading to Plugin Settings Update
2022-09-01 00:00:00
nvd
nvd
CVE-2022-37411
2022-09-09 15:15:13

0.001 Low

EPSS

Percentile

32.0%

JSON
Related for WPVDB-ID:AC895F6B-F79C-4B38-8ED7-63A5F6D876CA
cvelist1prion1cve1patchstack1nvd1