CVE-2019-5984

The CVE-2019-5984 entry concerns the WordPress plugin Custom CSS Pro (versions ≤ 1.0.3). The root issue is a cross-site request forgery (CSRF) that can allow remote attackers to hijack administrator sessions, enabling unauthorized actions when a logged-in admin views a malicious page. Public sour...