Lucene search
WpvulndbWPVDB-ID:EA90E311-71AA-482A-B31C-ADB0D0B0F6D8HistoryOct 20, 2023 - 12:00 a.m.
Website Builder by SeedProd < 6.15.15.3 - Arbitrary Settings Update via CSRF
2023-10-2000:00:00
wpscan.com
2
plugin
csrf
attackers
logged in users
Description The plugin does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks.
| CPE | Name | Operator | Version |
|---|---|---|---|
| eq | 6.15.15.3 |
Related
cve
cve
CVE-2023-4975
2023-10-20 07:15:16
nvd
nvd
CVE-2023-4975
2023-10-20 07:15:16
prion
prion
Cross site request forgery (csrf)
2023-10-20 07:15:00
openvas
openvas
WordPress Website Builder by SeedProd Plugin < 6.15.15.3 CSRF Vulnerability
2023-11-03 00:00:00
cvelist
cvelist
CVE-2023-4975
2023-10-20 06:35:13
wordfence
wordfence
6.5 Medium
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
28.7%
Related for WPVDB-ID:EA90E311-71AA-482A-B31C-ADB0D0B0F6D8