CVE-2019-14773

admin/includes/class.actions.snippet.php in the "Woody ad snippets" plugin through 2.2.5 for WordPress allows wp-admin/admin-post.php?action=close= deletion...

CVE-2019-14773

admin/includes/class.actions.snippet.php in the "Woody ad snippets" plugin through 2.2.5 for WordPress allows wp-admin/admin-post.php?action=close&post= deletion...

CVE-2019-14773

CVE-2019-14773 affects the WordPress Woody Ad Snippets plugin up to version 2.2.5. The admin_init hook in admin/includes/class.actions.snippets.php lacked CSRF or capability checks for the close action, enabling unauthenticated users to delete arbitrary posts via wp-admin/admin-post.php?action=cl...