WordPress WP Comment Remix Plugin <= 1.4.3 - CSRF

2008-10-2400:00:00

N/A

patchstack.com

EPSS

0.002

Percentile

59.6%

JSON

Because of this vulnerability, the attackers can perform unauthorized actions as administrators via a request that sets the “wpcr_hidden_form_input” parameter.

Solution

           Update the plugin.

References

cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4734

EPSS

0.002

Percentile

59.6%

JSON

Related for PATCHSTACK:1C265A43BA548AF3769300D9811F1BAA