Lucene search
PRIOn knowledge basePRION:CVE-2019-12826HistoryJul 01, 2019 - 6:15 p.m.
Cross site request forgery (csrf)
2019-07-0118:15:00
PRIOn knowledge base
www.prio-n.com
2
A Cross-Site-Request-Forgery (CSRF) vulnerability in widget_logic.php in the 2by2host Widget Logic plugin before 5.10.2 for WordPress allows remote attackers to execute PHP code via snippets (that are attached to widgets and then eval’d to dynamically determine their visibility) by crafting a malicious POST request that tricks administrators into adding the code.
| CPE | Name | Operator | Version |
|---|---|---|---|
| widget_logic | lt | 5.10.2 |
Related
openvas
openvas
WordPress Widget Logic Plugin < 5.10.2 CSRF Vulnerability
2019-07-05 00:00:00
cvelist
cvelist
CVE-2019-12826
2019-07-01 17:56:51
patchstack
patchstack
cve
cve
CVE-2019-12826
2019-07-01 18:15:11
nvd
nvd
CVE-2019-12826
2019-07-01 18:15:11
wpvulndb
wpvulndb
Widget Logic <= 5.10.2 - CSRF and Lack of Authorisation
2019-07-01 00:00:00
Widget Logic <= 5.9.0 - CSRF to RCE
2019-06-28 00:00:00