{"id":2968,"date":"2024-02-22T22:45:48","date_gmt":"2024-02-22T22:45:48","guid":{"rendered":"http:\/\/127.0.0.1\/colibri-page-builder-1-0-253-cross-site-request-fogery-via-cp_shortcode_refresh\/"},"modified":"2024-02-22T22:45:48","modified_gmt":"2024-02-22T22:45:48","slug":"colibri-page-builder-1-0-253-cross-site-request-fogery-via-cp_shortcode_refresh","status":"publish","type":"post","link":"http:\/\/127.0.0.1\/colibri-page-builder-1-0-253-cross-site-request-fogery-via-cp_shortcode_refresh\/","title":{"rendered":"Colibri Page Builder <= 1.0.253 – Cross-Site Request Fogery via cp_shortcode_refresh"},"content":{"rendered":"
<\/p>\n
El plugin Colibri Page Builder para WordPress es vulnerable a Cross-Site Request Forgery (CSRF) en todas las versiones hasta, e incluyendo, la 1.0.253. Esto se debe a la falta o validaci\u00f3n incorrecta de nonce en la funci\u00f3n cp_shortcode_refresh(). Esto hace posible que atacantes no autenticados ejecuten shortcodes arbitrarios a trav\u00e9s de una solicitud falsificada siempre […]<\/p>\n","protected":false},"author":0,"featured_media":0,"comment_status":"","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[681],"class_list":["post-2968","post","type-post","status-publish","format-standard","hentry","category-uncategorized","tag-cve-2024-1362"],"yoast_head":"\n