Cross site request forgery (csrf)

2019-09-2600:15:00

PRIOn knowledge base

www.prio-n.com

7.2 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

31.2%

The Watu Pro plugin before 4.9.0.8 for WordPress has CSRF that allows an attacker to delete quizzes.

CPENameOperatorVersion
watuprolt4.9.0.8

CPE	Name	Operator	Version
	watupro	lt	4.9.0.8

References

advisories.dxw.com/advisories/csrf-in-watu-pro-allows-unauthenticated-attackers-to-delete-quizzes/

calendarscripts.info/watupro/

wordpress.org/plugins/watupro/