PT-2021-16264 · WordPress · Wpvibes Redirect 404 Error Page To Homepage/Custom Page With Logs
CVSS v3.1
6.5
Medium
| Vector | AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N |
Name of the Vulnerable Software and Affected Versions:
The Redirect 404 Error Page to Homepage or Custom Page with Logs WordPress plugin versions prior to 1.7.9
Description:
The issue concerns a lack of CSRF check when deleting logs, which could allow an attacker to make a logged-in admin delete them via a CSRF attack.
Recommendations:
For versions prior to 1.7.9, update to version 1.7.9 or later to resolve the issue. As a temporary workaround, consider restricting access to the log deletion functionality to minimize the risk of exploitation.
Exploit
Fix
CSRF
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Wpvibes Redirect 404 Error Page To Homepage/Custom Page With Logs