Lucene search
WpvulndbWPVDB-ID:AF262A52-1719-48B5-A18D-123D7208BAF7HistoryMay 04, 2020 - 12:00 a.m.
wpForo < 1.7.0 - New Users Set as Admin via CSRF
2020-05-0400:00:00
wpscan.com
5
EPSS
0.001
Percentile
44.9%
The plugin did not have CSRF in place in a page, allowing attacker to make a logged in admin set all new users as admins directly
PoC
https://example.com/wp-admin/admin.php?page=wpforo-usergroups&default;=1
Related
nvd
nvd
CVE-2019-19109
2020-06-15 14:15:09
cve
cve
CVE-2019-19109
2020-06-15 14:15:09
wpexploit
wpexploit
wpForo < 1.7.0 - New Users Set as Admin via CSRF
2020-05-04 00:00:00
cvelist
cvelist
CVE-2019-19109
2020-06-15 13:10:44
prion
prion
Cross site request forgery (csrf)
2020-06-15 14:15:00