Cross-Site Request Forgery in LoginPress WordPress Plugin Versions 3.3.1 and Below
The LoginPress WordPress plugin has a Cross-Site Request Forgery (CSRF) vulnerability in versions up to 3.3.1. The issue stems from a lack of proper nonce validation in the 'custom_plugin_set_option' function. This security flaw allows an unauthenticated attacker to modify WordPress site settings if they can trick an administrator into clicking a malicious link. By exploiting this vulnerability, an attacker could change the default user registration role to administrator and enable user registration, potentially gaining administrative access to the vulnerable site. The vulnerability can only be exploited when the 'WPBRIGADE_SDK__DEV_MODE' constant is set to 'true'.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
hiddenpearls loginpress | wp-login custom login page customizer |
Vulmon