Lucene search
Pedro Cuco (Illex)WPVDB-ID:EB983D82-B894-41C5-B51F-94D4BBA3BA39HistoryJan 03, 2024 - 12:00 a.m.
Site Notes <= 2.0.0 - Admin Note Deletion via CSRF
2024-01-0300:00:00
Pedro Cuco (Illex)
wpscan.com
6
csrf attack
site notes plugin
admin notes
Description The plugin does not have CSRF checks in some of its functionalities, which could allow attackers to make logged in users perform unwanted actions, such as deleting administration notes, via CSRF attacks
PoC
Have an administrator open the following HTML file:
Related
prion
prion
Cross site request forgery (csrf)
2024-01-29 15:15:00
nvd
nvd
CVE-2023-6633
2024-01-29 15:15:09
cve
cve
CVE-2023-6633
2024-01-29 15:15:09
wpexploit
wpexploit
Site Notes <= 2.0.0 - Admin Note Deletion via CSRF
2024-01-03 00:00:00
cvelist
cvelist
CVE-2023-6633 Site Notes <= 2.0.0 - Admin Note Deletion via CSRF
2024-01-29 14:44:17
wordfence
wordfence
6.4 Medium
AI Score
Confidence
High
0.0005 Low
EPSS
Percentile
17.0%
Related for WPVDB-ID:EB983D82-B894-41C5-B51F-94D4BBA3BA39