Lucene search
+L

2 matches found

wpexploit
wpexploit
added 2022/06/27 12:0 a.m.150 views

Page Generator Plugin < 1.6.6 - Arbitrary Keywords Deletion/Duplication via CSRF

The plugin does not have CSRF check in place when deleting and duplicating keywords, which could allow attackers to make a logged in admin delete and duplicate arbitrary keywords via CSRF attacks https://example.com/wp-admin/admin.php?page=page-generator-keywords&cmd=delete&id=3...

4.3AI score
SaveExploits0
Patchstack
Patchstack
added 2022/06/27 12:0 a.m.11 views

WordPress Page Generator plugin <= 1.6.5 - Arbitrary Keywords Deletion/Duplication via Cross-Site Request Forgery (CSRF) vulnerability

Arbitrary Keywords Deletion/Duplication via Cross-Site Request Forgery CSRF vulnerability discovered by WPScanTeam in WordPress Page Generator plugin versions = 1.6.5. Solution Update the WordPress Page Generator plugin to the latest available version at least 1.6.6...

4AI score
SaveExploits0References1Affected Software1
Rows per page
Query Builder