81 matches found
WordPress Pods Plugin <= 2.4 - Multiple CSRF
Because of these vulnerabilities, the attackers can hijack the authentication of administrators for requests that conduct cross-site scripting attacks via the "toggled" parameter in the pods-components page to wp-admin/admin.php, reset pod settings and data via the "podsreset" parameter in the...
6.8CVSS3.5AI score0.01164EPSS
SaveExploits2References1Affected Software1
20