CVE-2017-8099: Cross-Site Request Forgery (CSRF)

There is CSRF in the WHIZZ plugin before 1.1.1 for WordPress, allowing attackers to delete any WordPress users and change the plugin's status via a GET request...

PT-2017-18114

Name of the Vulnerable Software and Affected Versions WHIZZ plugin versions prior to 1.1.1 for WordPress Description The issue allows attackers to perform actions such as deleting any WordPress users and changing the plugin's status via a GET request. This is due to a CSRF issue in the plugin...

WordPress Plugin WHIZZ 1.1.1 - Cross-Site Request Forgery

WordPress Plugin WHIZZ 1.1.1 - Cross-Site Request Forgery ====== Software: WordPress WHIZZ Version: active or disactive plugins: Mitigations ================ Disable the plugin until a new version is released that fixes this bug. FIX: ========== https://wordpress.org/plugins/whizz/ 1.1.1...