The WPlite WordPress plugin through 1.3.1 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack
References
Link | Resource |
---|---|
https://wpscan.com/vulnerability/91c44a4f-b599-46c0-a8df-d1fb87472abe | Exploit Third Party Advisory |
Configurations
Information
Published : 2022-06-20 04:15
Updated : 2022-06-28 09:55
NVD link : CVE-2022-1831
Mitre link : CVE-2022-1831
JSON object : View
CWE
CWE-352
Cross-Site Request Forgery (CSRF)
Products Affected
wplite_project
- wplite