Read the docs

Laubrotel

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Laubrotel records in CISA KEV

No Laubrotel vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
G.cms Generator 1 record LOW Lbstopattack 1 record MEDIUM

Records

1 record in Lbstopattack · all components

TI-2022-02858 CVE-2022-3097 · GHSA-rjwc-8f5q-7v36

LBStopAttack < 1.1.3 - Arbitrary Settings Update via CSRF

Priority MEDIUM 62

The Plugin LBstopattack WordPress plugin before 1.1.3 does not use nonces when saving its settings, making it possible for attackers to conduct CSRF attacks.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00424 Published 2022-10-25 Fixed in 1.1.3
Open these records in search →