Lucene search
WpvulndbWPVDB-ID:B16673B2-CC15-45C8-B43E-15128795B02EHistoryMar 29, 2023 - 12:00 a.m.
GMAce <= 1.5.2 - Arbitrary File Creation/Deletion/Update via CSRF
2023-03-2900:00:00
wpscan.com
10
gmace
arbitrary file creation
csrf
EPSS
0.009
Percentile
82.6%
The plugin does not have CSRF checks in the gmace_manager_server() function, which could allow attackers to make logged in admins create, delete and update arbitrary files via a CSRF attack
Related
prion
prion
Cross site request forgery (csrf)
2023-03-29 13:15:00
Cross site request forgery (csrf)
2023-03-29 11:15:00
cvelist
cvelist
CVE-2023-23861 WordPress GMAce Plugin <= 1.5.2 is vulnerable to Cross Site Request Forgery (CSRF)
2023-03-29 12:50:41
CVE-2023-1509
2023-03-29 10:14:35
cve
cve
CVE-2023-23861
2023-03-29 13:15:08
CVE-2023-1509
2023-03-29 11:15:07
nvd
nvd
CVE-2023-23861
2023-03-29 13:15:08
CVE-2023-1509
2023-03-29 11:15:07
wordfence
wordfence