ZeroHour

CVE-2022-1827

PoC
CVSS 3.1
6.5 medium
EPSS
<1%p43
Published
()
Modified
Description

The PDF24 Article To PDF WordPress plugin through 4.2.2 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack

Vendors
pdf24 articles to pdf project
Products
pdf24 articles to pdf
Ecosystems
WordPress
Weakness
CWE-352
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

In the news

No ingested article mentions this CVE yet.