WordPress Plugin Vulnerabilities

Adapta RGPD < 1.3.3 - Unauthorised Consent via CSRF

Description

The accept_cookie_consent AJAX action did not properly check for CSRF, allowing attackers to make users consent via a CSRF attack.

Proof of Concept

Affects Plugins

Plugin icon
adapta-rgpd
Fixed in 1.3.3

Classification

Type
CSRF
OWASP top 10
A2: Broken Authentication and Session Management
CWE
CWE-352
CVSS
4.3 (medium)

Miscellaneous

Original Researcher
WPSanTeam
Verified
Yes
WPVDB ID
547fb17c-f044-4f4a-b41a-5014bc84dafb

Timeline

Publicly Published
2021-06-30 (about 4 years ago)
Added
2021-06-30 (about 4 years ago)
Last Updated
2021-06-30 (about 4 years ago)

Other

Published
Title
Published
2023-09-27
Title
Block Update < 3.3.2 - Arbitrary Plugin Update Blocking via CSRF
Published
2025-03-11
Title
Login Logger <= 1.2.1 - Cross-Site Request Forgery
Published
2022-09-27
Title
Manage Notification E-mails < 1.8.3 - Settings Reset via CSRF
Published
2022-07-05
Title
AnyMind Widget <= 1.1 - Stored Cross-Site Scripting via CSRF
Published
2022-06-15
Title
Sharebar <= 1.4.1 - Arbitrary Settings Update to Stored XSS via CSRF