PT-2023-16307

Name of the Vulnerable Software and Affected Versions HT Event WordPress plugin versions prior to 1.4.6 Description The issue concerns a lack of CSRF check when activating plugins, which could allow attackers to make logged-in admins activate arbitrary plugins present on the blog via a CSRF attac...