Логотип exploitDog
bind:CVE-2023-4209
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2023-4209

Количество 2

Количество 2

nvd логотип

CVE-2023-4209

больше 2 лет назад

The POEditor WordPress plugin before 0.9.8 does not have CSRF checks in various places, which could allow attackers to make logged in admins perform unwanted actions, such as reset the plugin's settings and update its API key via CSRF attacks.

CVSS3: 4.3
EPSS: Низкий
github логотип

GHSA-7mhg-9f7m-6g74

больше 2 лет назад

The POEditor WordPress plugin before 0.9.8 does not have CSRF checks in various places, which could allow attackers to make logged in admins perform unwanted actions, such as reset the plugin's settings and update its API key via CSRF attacks.

CVSS3: 4.3
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
nvd логотип
CVE-2023-4209

The POEditor WordPress plugin before 0.9.8 does not have CSRF checks in various places, which could allow attackers to make logged in admins perform unwanted actions, such as reset the plugin's settings and update its API key via CSRF attacks.

CVSS3: 4.3
0%
Низкий
больше 2 лет назад
github логотип
GHSA-7mhg-9f7m-6g74

The POEditor WordPress plugin before 0.9.8 does not have CSRF checks in various places, which could allow attackers to make logged in admins perform unwanted actions, such as reset the plugin's settings and update its API key via CSRF attacks.

CVSS3: 4.3
0%
Низкий
больше 2 лет назад

Уязвимостей на страницу