CVE-2020-36740

The CVE-2020-36740 entry concerns the WordPress plugin Radio Buttons for Taxonomies. Affected component: save_single_term() in versions up to 2.0.5. Root cause: missing or incorrect nonce validation enables Cross-Site Request Forgery. Impact: unauthenticated attackers could save terms via forged ...

CVE-2020-36740 Radio Buttons for Taxonomies <= 2.0.5 - Cross-Site Request Forgery Bypass

The Radio Buttons for Taxonomies plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.0.5. This is due to missing or incorrect nonce validation on the savesingleterm function. This makes it possible for unauthenticated attackers to save terms via a...