WordPress BuddyPress Customer.io Analytics Integration plugin <= 1.1.6 - Arbitrary Plugin Settings Update via Cross-Site Request Forgery (CSRF) vulnerability

Arbitrary Plugin Settings Update via Cross-Site Request Forgery CSRF vulnerability discovered by WPScanTeam in WordPress BuddyPress Customer.io Analytics Integration plugin versions = 1.1.6. Solution Deactivate and delete. This plugin has been closed as of June 26, 2018 and is not available for...

BuddyPress Customer.io Analytics Integration <= 1.1.6 - Arbitrary Plugin Settings Update via CSRF

The plugin does not properly perform the CSRF check when saving its settings, allowing attackers to make logged in admin change them to arbitrary values...

BuddyPress Customer.io Analytics Integration <= 1.1.6 - Arbitrary Plugin Settings Update via CSRF

The plugin does not properly perform the CSRF check when saving its settings, allowing attackers to make logged in admin change them to arbitrary values PoC...