PT-2024-33642 · WordPress · Widget Bundle

Name of the Vulnerable Software and Affected Versions: Widget Bundle WordPress plugin versions prior to 2.0.1 Description: The issue is related to the lack of CSRF checks when logging widgets. This could allow attackers to make logged-in admins enable or disable widgets via a CSRF attack...