PT-2023-32158

Name of the Vulnerable Software and Affected Versions ImageMapper plugin for WordPress versions up to, and including, 1.2.6 Description The issue is related to Cross-Site Request Forgery due to missing or incorrect nonce validation on the imgmap save area title function. This allows unauthenticat...

PT-2023-32140

Name of the Vulnerable Software and Affected Versions ImageMapper plugin for WordPress versions up to, and including, 1.2.6 Description The issue allows authenticated attackers with subscriber-level permissions and above to delete arbitrary posts and pages due to a missing capability check on the...