PT-2021-14290

Name of the Vulnerable Software and Affected Versions: Push Notifications for WordPress Lite versions prior to 6.0.1 Description: A cross-site request forgery CSRF issue allows a remote attacker to hijack the authentication of an administrator and conduct an arbitrary operation via a specially...

CVE-2021-20846: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in Push Notifications for WordPress Lite versions prior to 6.0.1 allows a remote attacker to hijack the authentication of an administrator and conduct an arbitrary operation via a specially crafted web page...