Lucene search
Paul DannewitzPATCHSTACK:55CCCC1961DE1C992C86FA00DF14C218HistoryJul 02, 2019 - 12:00 a.m.
WordPress Widget Logic plugin <= 5.9.0 - Cross-Site Request Forgery (CSRF) vulnerability
2019-07-0200:00:00
Paul Dannewitz
patchstack.com
8
0.009 Low
EPSS
Percentile
82.8%
Cross-Site Request Forgery (CSRF) vulnerability that leads to Remote Code Execution (RCE) found by Paul Dannewitz in WordPress Widget Logic plugin (versions <= 5.9.0).
Solution
Update the WordPress Widget Logic plugin to the latest available version (at least 5.10.2).
| CPE | Name | Operator | Version |
|---|---|---|---|
| widget logic | le | 5.9.0 |
References
Related
openvas
openvas
WordPress Widget Logic Plugin < 5.10.2 CSRF Vulnerability
2019-07-05 00:00:00
prion
prion
Cross site request forgery (csrf)
2019-07-01 18:15:00
cvelist
cvelist
CVE-2019-12826
2019-07-01 17:56:51
patchstack
patchstack
wpvulndb
wpvulndb
Widget Logic <= 5.10.2 - CSRF and Lack of Authorisation
2019-07-01 00:00:00
Widget Logic <= 5.9.0 - CSRF to RCE
2019-06-28 00:00:00
cve
cve
CVE-2019-12826
2019-07-01 18:15:11
nvd
nvd
CVE-2019-12826
2019-07-01 18:15:11