Lucene search

K
wpvulndbWpvulndbWPVDB-ID:D9CCCE08-FBC1-4BE0-8815-D43EF992A5BA
HistoryOct 12, 2023 - 12:00 a.m.

Contact Form <= 2.0.10 - Form Styling Update via CSRF

2023-10-1200:00:00
wpscan.com
1
plugin
csrf
vulnerability
update
contact form
styling
attack
admins

6.4 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

24.2%

Description The plugin does not have CSRF check when updating the contact form styling, which could allow attackers to make logged in admins perform such action via a CSRF attack

6.4 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

24.2%

Related for WPVDB-ID:D9CCCE08-FBC1-4BE0-8815-D43EF992A5BA