CVE-2019-14681

The Deny All Firewall plugin before 1.1.7 for WordPress allows wp-admin/options-general.php?page=dafsettings&dafremove=true CSRF...

CVE-2019-14681

The Deny All Firewall plugin before 1.1.7 for WordPress allows wp-admin/options-general.php?page=dafsettings&dafremove=true CSRF...

CVE-2019-14681

CVE-2019-14681 affects the WordPress plugin Deny All Firewall up to version 1.1.6. The flaw is a CSRF in wp-admin/options-general.php?page=daf_settings&daf_remove=true that an attacker could trigger to perform unintended actions on behalf of an authenticated admin. Impact states partial confident...