CVE-2023-0504
Assigner: WPScan
Published: 2023-03-27T15:37:15.425Z
State: PUBLISHED
title: HT Politic < 2.3.8 - Arbitrary Plugin Activation via CSRF
problemTypes: descriptions: description: CWE-352 Cross-Site Request Forgery (CSRF)
type: CWE
affected: vendor: Unknown
product: HT Politic
versions: status: affected
versionType: custom
version: 0
lessThan: 2.3.8
defaultStatus: unaffected
collectionURL: https://wordpress.org/plugins
descriptions: value: The HT Politic WordPress plugin before 2.3.8 does not have CSRF check when activating plugins, which could allow attackers to make logged in admins activate arbitrary plugins present on the blog via a CSRF attack
credits: value: Lana Codes
type: finder
value: WPScan
type: coordinator
source: discovery: EXTERNAL
x_generator: engine: WPScan CVE Generator