The Lock User Account WordPress plugin through 1.0.3 does not have CSRF check when bulk locking and unlocking accounts, which could allow attackers to make logged in admins lock and unlock arbitrary users via a CSRF attack
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: WPScan
Published: 2023-09-11T19:46:04.810Z
Updated: 2024-08-02T07:24:04.371Z
Reserved: 2023-08-11T13:32:03.247Z
Link: CVE-2023-4307
Vulnrichment
No data.
NVD
Status : Modified
Published: 2023-09-11T20:15:12.117
Modified: 2024-11-21T08:34:49.603
Link: CVE-2023-4307
Redhat
No data.