CVE-2016-10914

The add-from-server plugin before 3.3.2 for WordPress has CSRF for importing a large file...

WordPress Add From Server 6.2 Cross Site Request Forgery

------------------------------------------------------------------------ Cross-Site Request Forgery vulnerability in Add From Server WordPress Plugin ------------------------------------------------------------------------ Edwin Molenaar, July 2016...

WordPress Plugin Add From Server < 3.3.2 - Cross-Site Request Forgery (Arbitrary File Upload)

Cross-Site Request Forgery vulnerability in Add From Server WordPress Plugin Abstract It was discovered that Add From Server is vulnerabile to Cross-Site Request Forgery. It can be exploited by luring the target user into clicking a specially crafted link or visiting a malicious website or...

WordPress Add From Server Plugin 3.3.1 Plugin - CSRF

A Cross-Site Request Forgery CSRF was discovered in WordPress Add From Server Plugin 3.3.2 plugin. The function handleimports in add-from-server/class.add-from-server.php is not protected with an anti-Cross-Site Request Forgery token, therefore it allows remote attackers to add illegal content to...