PT-2023-12511 · WordPress · Edwiser Bridge

Name of the Vulnerable Software and Affected Versions: Edwiser Bridge plugin for WordPress versions up to, and including, 2.0.6 Description: The issue is due to missing or incorrect nonce validation on several functions, including user data synchronization initiater, course synchronization...

WordPress Edwiser Bridge plugin <= 2.0.6 - Multiple Cross-Site Request Forgery (CSRF) vulnerabilities

Multiple Cross-Site Request Forgery CSRF vulnerabilities discovered by NinTechNet in WordPress Edwiser Bridge plugin versions = 2.0.6. Solution Update the WordPress Edwiser Bridge plugin to the latest available version at least = 2.0.7...

Edwiser Bridge < 2.0.7 - CSRF Nonce Bypass

The plugin did not properly verify for CSRF nonces, allowing requests without them to bypass the checks in place. This could allow attackers to make logged in users perform unwanted actions...