Lucene search

K
wpvulndbWpvulndbWPVDB-ID:EAC3A241-A56F-4569-83EC-1B30D0AC0A64
HistoryOct 12, 2023 - 12:00 a.m.

Keap Landing Pages <= 1.4.2 - Settings Update via CSRF

2023-10-1200:00:00
wpscan.com
1
plugin
csrf
settings
update
attackers
admin
vulnerability

6.4 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

24.3%

Description The plugin does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack

6.4 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

24.3%

Related for WPVDB-ID:EAC3A241-A56F-4569-83EC-1B30D0AC0A64