Lucene search
WpvulndbWPVDB-ID:B8D5B2F7-CD0E-4F4A-B2E3-1A4E7838E04DHistoryOct 10, 2023 - 12:00 a.m.
WP Custom Post Template <= 1.0 - Settings Update via CSRF
2023-10-1000:00:00
wpscan.com
1
plugin
csrf
vulnerability
settings
update
attack
Description The plugin does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack
Related
cve
cve
CVE-2023-41851
2023-10-10 09:15:09
cvelist
cvelist
nvd
nvd
CVE-2023-41851
2023-10-10 09:15:09
prion
prion
Cross site request forgery (csrf)
2023-10-10 09:15:00
wordfence
wordfence
6.4 Medium
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
24.1%
Related for WPVDB-ID:B8D5B2F7-CD0E-4F4A-B2E3-1A4E7838E04D