Lucene search

K
wpvulndbWpvulndbWPVDB-ID:F4F781CA-8386-44E4-B740-6763E0365FAB
HistoryOct 10, 2023 - 12:00 a.m.

AWP Classifieds < 4.3.1 - Categories Mgt via CSRF

2023-10-1000:00:00
wpscan.com
5
awp classifieds
csrf
vulnerability
categories management
logged in admins

AI Score

6.5

Confidence

High

EPSS

0.001

Percentile

24.1%

Description The plugin does not have CSRF checks when managing categories (such as deleting, updating etc), which could allow attackers to make logged in admins perform such actions via CSRF attacks

AI Score

6.5

Confidence

High

EPSS

0.001

Percentile

24.1%

Related for WPVDB-ID:F4F781CA-8386-44E4-B740-6763E0365FAB