WordPress Plugin Vulnerabilities

Browser and Operating System Finder <= 1.2 - Unauthenticated Settings Reset

Description

The plugin does not have authorisation and CSRF check when resetting its settings, allowing unauthenticated users to reset them

Proof of Concept

Affects Plugins

Classification

Type
NO AUTHORISATION
CWE

Miscellaneous

Original Researcher
WPScanTeam
Verified
Yes

Timeline

Publicly Published
2022-06-02 (about 3 years ago)
Added
2022-06-02 (about 3 years ago)
Last Updated
2022-06-02 (about 3 years ago)

Other