CVE-2017-18521

The democracy-poll plugin before 5.4 for WordPress has CSRF via wp-admin/options-general.php?page=democracy-poll&subpage=l10n...

CVE-2017-18521

The CVE-2017-18521 entry concerns the WordPress Democracy Poll plugin prior to version 5.4. Multiple connected sources confirm a CSRF flaw in the admin path wp-admin/options-general.php?page=democracy-poll&subpage=l10n, potentially allowing unauthorized actions when a user is convinced to perform...