Lucene search

K
wpvulndbWpvulndbWPVDB-ID:E925FB50-278D-4BB3-9C19-B3EB2F4FD795
HistoryMay 22, 2023 - 12:00 a.m.

Mediamatic – Media Library Folders <= 2.8.1 - Cross-Site Request Forgery

2023-05-2200:00:00
wpscan.com
4
mediamatic
media library
csrf
request forgery
vulnerability
software

0.001 Low

EPSS

Percentile

27.7%

The plugin does not have CSRF checks in some places, which could allow attackers to make logged-in users perform unwanted actions via CSRF attacks. The original researcher didn’t provide enough information on which actions could be performed.

CPENameOperatorVersion
mediamaticeq*

0.001 Low

EPSS

Percentile

27.7%

Related for WPVDB-ID:E925FB50-278D-4BB3-9C19-B3EB2F4FD795