The WP Insurance WordPress plugin before 2.1.4 does not have CSRF check when activating plugins, which could allow attackers to make logged in admins activate arbitrary plugins present on the blog via a CSRF attack
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: WPScan
Published: 2023-03-27T15:37:33.856Z
Updated: 2024-08-02T05:10:56.414Z
Reserved: 2023-01-25T10:08:19.563Z
Link: CVE-2023-0501
Vulnrichment
No data.
NVD
Status : Modified
Published: 2023-03-27T16:15:08.877
Modified: 2024-11-21T07:37:18.040
Link: CVE-2023-0501
Redhat
No data.