Lucene search

WpvulndbWPVDB-ID:CE01FDC5-D8F1-4678-A4D0-190E2E75476B

HistoryOct 25, 2023 - 12:00 a.m.

Open Graph Metabox <= 1.4.4 - CSRF

2023-10-2500:00:00

wpscan.com

plugin

csrf

checks

attackers

logged in

users

actions

attacks

vulnerability

AI Score

6.5

Confidence

High

EPSS

0.001

Percentile

24.1%

JSON

Description The plugin does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks

References

patchstack.com/database/vulnerability/open-graph-metabox/wordpress-open-graph-metabox-plugin-1-4-4-cross-site-request-forgery-csrf-vulnerability

www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/open-graph-metabox/open-graph-metabox-144-cross-site-request-forgery