WordPress Library File Manager plugin跨站请求伪造漏洞

WordPress is the Wordpress Foundation’s set of blogging platform developed using the PHP language. WordPress plugin is a WordPress open source application plugin. WordPress Library File Manager plugin has a cross-site request forgery vulnerability, which stems from the fact that the plugin uses an outdated version of the The vulnerability stems from the fact that the plugin uses an outdated version of the elFinder library, which does not have any authorization and CSRF checks in its connector AJAX operations, and can be exploited by authenticated attackers to spoof malicious requests and trick victims into clicking to perform sensitive actions.