WordPress Plugin Vulnerabilities

BizPrint < 4.5.4 - Printer Settings Update via CSRF

Description

The plugin is vulnerable to Cross-Site Request Forgery due to missing or incorrect nonce validation within printer management. This makes it possible for unauthenticated attackers to modify printer settings and potentially perform other unauthorized actions via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.

Affects Plugins

References

Classification

Miscellaneous

Timeline

Publicly Published
2024-01-30 (about 2 years ago)
Added
2024-04-02 (about 2 years ago)
Last Updated
2024-04-02 (about 2 years ago)

Other