CVE-2022-3098 – The Login Block IPs WordPress plugin through 1.0.0 does not have CSRF check in place when …

Vuln ID: CVE-2022-3098

Published:  2022-09-26  13:15:11Z

Description: The Login Block IPs WordPress plugin through 1.0.0 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack

Source: NVD.NIST.GOV

 


Date:

Categorie(s):

Tag(s):