Lucene search
+L

2 matches found

WPVulnDB
WPVulnDB
added 2022/08/01 12:00 a.m.10 views

Social Slider Feed < 2.0.5 - Subscriber+ Arbitrary Feed Deletion

The plugin does not have authorisation and CSRF check in place when deleting feeds, allowing ay authenticated users, such as subscriber to delete arbitrary feeds PoC As any authenticated user, such as subscriber. Or via CSRF against them...

2.3AI score
SaveExploits0Affected Software1
wpexploit
wpexploit
added 2022/08/01 12:00 a.m.152 views

Social Slider Feed < 2.0.5 - Subscriber+ Arbitrary Feed Deletion

The plugin does not have authorisation and CSRF check in place when deleting feeds, allowing ay authenticated users, such as subscriber to delete arbitrary feeds As any authenticated user, such as subscriber. Or via CSRF against them...

0.5AI score
SaveExploits0
Rows per page
Query Builder