Description

WordPress Plugin WP Cerber Security, Anti-spam & Malware Scan is prone to a cross-site request forgery vulnerability. Exploiting this issue may allow a remote attacker to perform certain administrative actions and gain unauthorized access to the affected application; other attacks are also possible. WordPress Plugin WP Cerber Security, Anti-spam & Malware Scan version 2.7.2 is vulnerable; prior versions may also be affected.

Remediation

Update to plugin version 2.9 or latest

References

https://www.pluginvulnerabilities.com/2016/08/29/cross-site-request-forgery-csrfsettings-change-vulnerability-in-cerber-limit-login-attempts/

https://wordpress.org/plugins/wp-cerber/changelog/

Related Vulnerabilities

WordPress Plugin WP Construction Mode Cross-Site Request Forgery (1.91)

WordPress Plugin WPFront User Role Editor Unspecified Vulnerability (2.14.1)

WordPress Multiple Cross-Site Scripting Vulnerabilities (2.0.11 - 2.3)

WordPress Plugin Church Admin Cross-Site Scripting (0.856)

WordPress Plugin Robo Gallery-Photo Gallery and Images Gallery Remote Code Execution (2.0.14)

Severity

High

Classification

CWE-352 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Tags

Missing Update CSRF