WordPress Adapta RGPD plugin <= 1.3.2 - Unauthorised Consent via Cross-Site Request Forger (CSRF) vulnerability

Unauthorised Consent via Cross-Site Request Forger CSRF vulnerability discovered by WPSanTeam in WordPress Adapta RGPD plugin versions = 1.3.2. Solution Update the WordPress Adapta RGPD plugin to the latest available version at least 1.3.3...

Adapta RGPD < 1.3.3 - Unauthorised Consent via CSRF

The acceptcookieconsent AJAX action did not properly check for CSRF, allowing attackers to make users consent via a CSRF attack. https://example.com/wp-admin/admin-ajax.php?action=acceptcookieconsent...

Adapta RGPD < 1.3.3 - Unauthorised Consent via CSRF

The acceptcookieconsent AJAX action did not properly check for CSRF, allowing attackers to make users consent via a CSRF attack. PoC https://example.com/wp-admin/admin-ajax.php?action=acceptcookieconsent...