Lucene search
WpvulndbWPVDB-ID:F187F77D-F416-4014-82AD-0EEFBDD3DE3FHistoryOct 25, 2023 - 12:00 a.m.
Auto Login New User After Registration <= 1.9.6 - CSRF
2023-10-2500:00:00
wpscan.com
3
plugin
csrf checks
attackers
logged in users
unwanted actions
csrf attacks
Description The plugin does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks
References
patchstack.com/database/vulnerability/auto-login-new-user-after-registration/wordpress-auto-login-new-user-after-registration-plugin-1-9-6-cross-site-request-forgery-csrf-vulnerability
www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/auto-login-new-user-after-registration/auto-login-new-user-after-registration-196-cross-site-request-forgery-to-settings-modification
Related
vulnrichment
vulnrichment
prion
prion
Cross site request forgery (csrf)
2023-10-25 18:17:00
cvelist
cvelist
cve
cve
CVE-2023-46202
2023-10-25 18:17:37
nvd
nvd
CVE-2023-46202
2023-10-25 18:17:37
wordfence
wordfence
AI Score
6.5
Confidence
High
EPSS
0.001
Percentile
24.1%
Related for WPVDB-ID:F187F77D-F416-4014-82AD-0EEFBDD3DE3F