Описание
The WP Hide WordPress plugin through 0.0.2 does not have authorisation and CSRF checks in place when updating the custom_wpadmin_slug settings, allowing unauthenticated attackers to update it with a crafted request
Ссылки
- ExploitThird Party Advisory
- ExploitThird Party Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 0.0.2 (включая)
cpe:2.3:a:weberge:wp_hide:*:*:*:*:*:wordpress:*:*
EPSS
Процентиль: 34%
0.0014
Низкий
5.3 Medium
CVSS3
Дефекты
CWE-352
CWE-352
Связанные уязвимости
CVSS3: 5.3
github
больше 3 лет назад
The WP Hide WordPress plugin through 0.0.2 does not have authorisation and CSRF checks in place when updating the custom_wpadmin_slug settings, allowing unauthenticated attackers to update it with a crafted request
EPSS
Процентиль: 34%
0.0014
Низкий
5.3 Medium
CVSS3
Дефекты
CWE-352
CWE-352