The Enable/Disable Auto Login when Register WordPress plugin through 1.1.0 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack
References
| Link | Resource |
|---|---|
| https://wpscan.com/vulnerability/c7984bfb-86a3-4530-90ae-17ab39af1c54 | Exploit Third Party Advisory |
| https://wpscan.com/vulnerability/c7984bfb-86a3-4530-90ae-17ab39af1c54 | Exploit Third Party Advisory |
Configurations
Configuration 1 (hide)
|
History
04 Feb 2025, 20:15
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-352 |
21 Nov 2024, 07:37
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://wpscan.com/vulnerability/c7984bfb-86a3-4530-90ae-17ab39af1c54 - Exploit, Third Party Advisory |
12 May 2023, 13:33
| Type | Values Removed | Values Added |
|---|---|---|
| References | (MISC) https://wpscan.com/vulnerability/c7984bfb-86a3-4530-90ae-17ab39af1c54 - Exploit, Third Party Advisory | |
| CPE | cpe:2.3:a:enable\/disable_auto_login_when_register_project:enable\/disable_auto_login_when_register:*:*:*:*:*:wordpress:*:* | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 6.5 |
08 May 2023, 14:17
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-05-08 14:15
Updated : 2025-02-04 20:15
NVD link : CVE-2023-0522
Mitre link : CVE-2023-0522
CVE.ORG link : CVE-2023-0522
JSON object : View
Products Affected
enable\/disable_auto_login_when_register_project
- enable\/disable_auto_login_when_register
CWE
CWE-352
Cross-Site Request Forgery (CSRF)