Lucene search
Daniel RufWPVDB-ID:AD3F6F3D-E12C-4867-906C-73AA001C7351HistoryJun 16, 2022 - 12:00 a.m.
Comment License < 1.4.0 - Arbitrary Settings Update via CSRF
2022-06-1600:00:00
Daniel Ruf
wpscan.com
10
csrf
arbitrary settings update
security issue
EPSS
0.001
Percentile
25.9%
The plugin does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack
PoC
Related
prion
prion
Cross site request forgery (csrf)
2022-07-11 13:15:00
cnvd
cnvd
WordPress Comment License plugin跨站请求伪造漏洞
2022-07-13 00:00:00
wpexploit
wpexploit
Comment License < 1.4.0 - Arbitrary Settings Update via CSRF
2022-06-16 00:00:00
cvelist
cvelist
CVE-2022-1957 Comment License < 1.4.0 - Arbitrary Settings Update via CSRF
2022-07-11 12:57:04
nvd
nvd
CVE-2022-1957
2022-07-11 13:15:09
cve
cve
CVE-2022-1957
2022-07-11 13:15:09