CSRF Vulnerability in Erident Custom Login and Dashboard Plugin for WordPress
CVE-2015-9322

8.8HIGH

Key Information:

Vendor

Wordpress
Status
Erident Custom Login And Dashboard
Vendor
CVE Published:
16 August 2019

What is CVE-2015-9322?

The Erident Custom Login and Dashboard plugin for WordPress, prior to version 3.5, is susceptible to a Cross-Site Request Forgery (CSRF) attack. This vulnerability allows attackers to trick authenticated users into executing unwanted actions on the WordPress site without their consent, potentially compromising site integrity and user data. It is essential for users of affected versions to update promptly to mitigate associated risks.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

https://wordpress.org/plugins/erident-custom-login-and-da...
x_refsource_MISC

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.