Cross site request forgery (csrf)

The Fileviewer WordPress plugin through 2.2 does not have CSRF checks in place when performing actions such as upload and delete files. As a result, attackers could make a logged in administrator delete and upload arbitrary files via a CSRF attack...

PT-2021-16014

Name of the Vulnerable Software and Affected Versions Fileviewer WordPress plugin versions through 2.2 Description The issue concerns the lack of CSRF checks in the Fileviewer WordPress plugin, allowing attackers to perform actions such as uploading and deleting files on behalf of a logged-in...