Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
wpvulndbWpvulndbWPVDB-ID:BC91072B-BED3-43E3-960C-A76E0AD184E0
HistoryJan 20, 2023 - 12:00 a.m.

Contact Us page - Contact people LITE < 3.7.1 - Contact Update/Deletion/Creation via CSRF

2023-01-2000:00:00
wpscan.com
9
contact us
csrf
vulnerability
update
deletion
creation
software

EPSS

0.001

Percentile

22.3%

JSON

The plugin does not have CSRF checks when creating, updating and deleting contacts, which could allow attackers to make logged in users perform such actions via CSRF attacks

Related

prion 1
nvd 1
cvelist 1
cve 1
prion
prion
Cross site request forgery (csrf)
2023-03-01 13:15:00
nvd
nvd
CVE-2023-23973
2023-03-01 13:15:10
cvelist
cvelist
CVE-2023-23973 WordPress Contact Us page - Contact people LITE Plugin <= 3.7.0 is vulnerable to Cross Site Request Forgery (CSRF)
2023-03-01 12:49:28
cve
cve
CVE-2023-23973
2023-03-01 13:15:10

EPSS

0.001

Percentile

22.3%

JSON
Related for WPVDB-ID:BC91072B-BED3-43E3-960C-A76E0AD184E0
prion1nvd1cvelist1cve1