The PDF24 Articles To PDF WordPress plugin through 4.2.2 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack
References
Link | Resource |
---|---|
https://wpscan.com/vulnerability/877ce7a5-b1ff-4d03-9cd8-6beed5595af8 | Exploit Third Party Advisory |
Configurations
Configuration 1 (hide)
|
Information
Published : 2022-06-20 04:15
Updated : 2022-06-28 09:42
NVD link : CVE-2022-1828
Mitre link : CVE-2022-1828
JSON object : View
CWE
CWE-352
Cross-Site Request Forgery (CSRF)
Products Affected
pdf24_articles_to_pdf_project
- pdf24_articles_to_pdf