Lucene search
WpvulndbWPVDB-ID:D5E842A4-16B7-430F-A018-176F94422B66HistoryJan 03, 2024 - 12:00 a.m.
WP 2FA < 2.6.0 - Arbitrary Email Sending via CSRF
2024-01-0300:00:00
wpscan.com
4
wp 2fa
csrf attack
email sending
Description The plugin has a flawed CSRF check when sending emails to registered users, which could allow attackers to make logged in admins perform such action via a CSRF attack
Related
prion
prion
Cross site request forgery (csrf)
2024-01-11 07:15:00
nvd
nvd
CVE-2023-6520
2024-01-11 07:15:09
cvelist
cvelist
CVE-2023-6520
2024-01-11 06:49:30
cve
cve
CVE-2023-6520
2024-01-11 07:15:09
wordfence
wordfence
AI Score
7
Confidence
Low
EPSS
0.001
Percentile
28.9%
Related for WPVDB-ID:D5E842A4-16B7-430F-A018-176F94422B66