Duplicator < 1.5.7.1 - Settings Removal via CSRF

2024-01-0400:00:00

wpscan.com

duplicator

plugin

csrf

vulnerability

7 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

9.0%

JSON

Description The plugin does not have CSRF checks when remove some of its options, which could allow attackers to make logged in admins perform such action via a CSRF attack

CPENameOperatorVersion
eq1.5.7.1

CPE	Name	Operator	Version
		eq	1.5.7.1

References

patchstack.com/database/vulnerability/duplicator/wordpress-duplicator-plugin-1-5-7-cross-site-request-forgery-csrf-vulnerability