CVE-2017-18544

The invite-anyone plugin before 1.3.16 for WordPress has admin-panel CSRF...

CVE-2017-18544

The invite-anyone plugin before 1.3.16 for WordPress has admin-panel CSRF...

CVE-2017-18544

CVE-2017-18544 affects the WordPress plugin Invite Anyone prior to version 1.3.16. The issue is an admin-panel CSRF vulnerability caused by insufficient CSRF protections on admin endpoints, enabling potentially unauthorized admin actions. Exploitation details, affected environments, and remediati...