PT-2024-5069 · WordPress · Wp To Do

Name of the Vulnerable Software and Affected Versions: WP To Do plugin versions up to, and including, 1.3.0 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability due to missing or incorrect nonce validation on the wptodo addcomment function. This allows...