Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-hfgv-8383-5fm8

Опубликовано: 14 дек. 2021
Источник: github
Github: Не прошло ревью

Описание

The WP Limits WordPress plugin through 1.0 does not have CSRF check when saving its settings, allowing attacker to make a logged in admin change them, which could make the blog unstable by setting low values

The WP Limits WordPress plugin through 1.0 does not have CSRF check when saving its settings, allowing attacker to make a logged in admin change them, which could make the blog unstable by setting low values

EPSS

Процентиль: 29%
0.00103
Низкий

Дефекты

CWE-352

Связанные уязвимости

CVSS3: 4.3
nvd
около 4 лет назад

The WP Limits WordPress plugin through 1.0 does not have CSRF check when saving its settings, allowing attacker to make a logged in admin change them, which could make the blog unstable by setting low values

EPSS

Процентиль: 29%
0.00103
Низкий

Дефекты

CWE-352