CVE-2017-8099

CVE-2017-8099 affects the WHIZZ WordPress plugin prior to version 1.1.1. The connected documents describe a Cross-Site Request Forgery (CSRF) vulnerability that lets an attacker delete WordPress users and change the plugin’s status via a GET request. Exploitation details beyond this behavior are ...

CVE-2017-8099

There is CSRF in the WHIZZ plugin before 1.1.1 for WordPress, allowing attackers to delete any WordPress users and change the plugin's status via a GET request...