WordPress Plugin Cross-Site Request Forgery Vulnerability (CNVD-2021-102803)

WordPress is the Wordpress Foundation’s set of blogging platform developed using the PHP language. The platform supports the hosting of personal blog sites on PHP and MySQL servers. WordPress plugin is a WordPress open source application plugin. WordPress plugin Static 1.0.6 and its previous versions exist cross-site request forgery vulnerability, the vulnerability originates from ~/Stetic .php file missing stats_ page function, an attacker can use this vulnerability to potentially inject arbitrary web scripts in versions 1.0.6 and below.