CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
What the vulnerability does
Cross-Site Request Forgery (CSRF) vulnerability in WhiteWP White Label – WordPress Custom Admin, Custom Login Page, and Custom Dashboard.This issue affects White Label – WordPress Custom Admin, Custom Login Page, and Custom Dashboard: from n/a through 2.9.0.
Explanation of Vulnerability in Simple Terms
The White Label plugin for WordPress contains a cross-site request forgery (CSRF) vulnerability in versions up to 2.9.0. An attacker can craft a malicious webpage that, when visited by a logged-in site administrator, performs unwanted actions on the site without the admin's knowledge or consent. This could allow unauthorized changes to custom admin settings, login pages, or dashboard configurations.
What an attacker can do
Perform unwanted administrative actions on the site if a logged-in admin visits a malicious webpage.
Potential impact on your site
An attacker could modify custom admin branding, login pages, or dashboard settings without your permission.
Conditions required to exploit
A site administrator must be logged in and visit a page controlled by the attacker.
Key dates
External resources
Related vulnerabilities
