CVE-2020-36761 Top 10 <= 2.9.4 - Cross-Site Request Forgery Bypass

The Top 10 plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.10.4. This is due to missing or incorrect nonce validation on the tptnexporttables function. This makes it possible for unauthenticated attackers to generate an export of the top 10 tab...

CVE-2020-36761

The CVE-2020-36761 entry concerns the WordPress Top 10 plugin. A Cross-Site Request Forgery vulnerability in versions up to 2.10.4 arises from missing or incorrect nonce validation in tptn_export_tables(), allowing unauthenticated attackers to trigger an export of the Top 10 table via a forged re...