Lucene search

K
wpvulndbWpvulndbWPVDB-ID:B4BDCA31-32FD-4BF9-8990-7717E291B39B
HistoryOct 10, 2023 - 12:00 a.m.

authLdap < 2.5.9 - Settings Update via CSRF

2023-10-1000:00:00
wpscan.com
5
authldap
plugin
csrf
vulnerability

AI Score

6.4

Confidence

High

EPSS

0.001

Percentile

24.1%

Description The plugin does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack

AI Score

6.4

Confidence

High

EPSS

0.001

Percentile

24.1%

Related for WPVDB-ID:B4BDCA31-32FD-4BF9-8990-7717E291B39B