CVE-2019-15828

The one-click-ssl plugin before 1.4.7 for WordPress has CSRF...

CVE-2019-15828

The one-click-ssl plugin before 1.4.7 for WordPress has CSRF...

CVE-2019-15828

CVE-2019-15828 affects the WordPress one-click-ssl plugin, vulnerable prior to v1.4.7 to CSRF. Multiple connected sources confirm lack of CSRF/authorization checks on settings and AJAX methods, enabling unauthorized changes via crafted requests. CVSS data from NVD indicates high impact (C/H, I/H,...