WPCS < 1.1.7 - Arbitrary Plugin's Settings Change via CSRF

🗓️ 06 Jul 2021 00:00:00Reported by wpvulndbType

WPCS Arbitrary Plugin's Settings Change via CSR

Reporter	Title	Published	Views	Family All 7
Patchstack	WordPress WPCS plugin <= 1.1.6 - Cross-Site Request Forgery (CSRF) vulnerability	6 Jul 202100:00	–	patchstack
Prion	Cross site request forgery (csrf)	7 Jul 202108:15	–	prion
Cvelist	CVE-2021-20780	7 Jul 202107:05	–	cvelist
CNVD	WordPress Currency Switcher plugin cross-site request forgery vulnerability	9 Jul 202100:00	–	cnvd
Japan Vulnerability Notes	JVN#91372527: WordPress Plugin "WPCS - WordPress Currency Switcher" vulnerable to cross-site request forgery	6 Jul 202100:00	–	jvn
NVD	CVE-2021-20780	7 Jul 202108:15	–	nvd
CVE	CVE-2021-20780	7 Jul 202108:15	–	cve

Vulners

Node

wp-currency wordpress_currency_switcherRange<1.1.7wordpress

Source	Link
jvn	www.jvn.jp/en/jp/JVN91372527/

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

06 Jul 2021 00:00Current

4.2Medium risk

Vulners AI Score4.2

EPSS0.002