PT-2023-18882 · WordPress · Gsheetconnector-Gravityforms-Pro+1
CVSS v3.1
6.5
Média
| Vetor | AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N |
Name of the Vulnerable Software and Affected Versions
Gravity Forms Google Sheet Connector WordPress plugin versions prior to 1.3.5
gsheetconnector-gravityforms-pro WordPress plugin versions prior to 1.3.5
Description
The issue concerns a lack of CSRF check when updating the Access Code, potentially allowing attackers to manipulate logged-in admins into changing the access code to an arbitrary one via a CSRF attack.
Recommendations
For Gravity Forms Google Sheet Connector WordPress plugin versions prior to 1.3.5, update to version 1.3.5 or later.
For gsheetconnector-gravityforms-pro WordPress plugin versions prior to 1.3.5, update to version 1.3.5 or later.
Exploit
Correção
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Gravity Forms Google Sheet Connector
Gsheetconnector-Gravityforms-Pro