CVE-2022-0328

The Simple Membership WordPress plugin before 4.0.9 does not have CSRF check when deleting members in bulk, which could allow attackers to make a logged in admin delete them via a CSRF attack...

PT-2024-26124 · WordPress · Button Generator

Name of the Vulnerable Software and Affected Versions: The Button Generator WordPress plugin versions prior to 3.0 Description: The issue is related to the lack of a CSRF check when bulk deleting, which could allow attackers to make a logged-in admin delete buttons via a CSRF attack...