Lucene search
WpvulndbWPVDB-ID:CCC3C229-35A2-4D0C-8EBA-FF78CE04541EHistoryApr 05, 2023 - 12:00 a.m.
WCFM Membership < 2.10.0 - Multiple CSRF
2023-04-0500:00:00
wpscan.com
5
wcfm membership
csrf
ajax actions
security vulnerability
attacker
membership details
EPSS
0.003
Percentile
70.0%
The plugin does not have CSRF checks in various AJAX actions, allowing attackers to make logged in admins call them and modify membership details/renewal information etc via CSRF attacks
Related
nvd
nvd
CVE-2022-4941
2023-04-05 19:15:07
prion
prion
Cross site request forgery (csrf)
2023-04-05 19:15:00
cve
cve
CVE-2022-4941
2023-04-05 19:15:07
cvelist
cvelist
CVE-2022-4941
2023-04-05 18:00:49
wordfence
wordfence