WordPress BuddyPress Builder for Elementor – BuddyBuilder plugin <= 1.7.4 - Authenticated (Contributor+) Post Disclosure vulnerability

Authenticated Contributor+ Post Disclosure vulnerability discovered by Francesco Carlucci in WordPress Plugin BuddyPress Builder for Elementor – BuddyBuilder versions = 1.7.4...

WordPress BuddyPress Builder for Elementor – BuddyBuilder Plugin < 1.7.4 is vulnerable to Cross Site Request Forgery (CSRF)

Software BuddyPress Builder for Elementor – BuddyBuilder Type Plugin Vulnerable versions 1.7.4 Fixed in 1.7.4 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE N/A Patch priority Low CVSS severity Low 4.3 Developer StaxWP PSID 0a1c78853d94 Credits WordFence...