CVE-2024-7688 AZIndex <= 0.8.1 - Index Deletion via CSRF

The AZIndex WordPress plugin through 0.8.1 does not have CSRF checks in some places, which could allow attackers to make logged in admin delete arbitrary indexes via a CSRF attack...

WordPress AZIndex Plugin <= 0.8.1 is vulnerable to Cross Site Request Forgery (CSRF)

Software AZIndex Type Plugin Vulnerable versions = 0.8.1 Fixed in N/A OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-7688 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID bdd657255bf1 Credits Bob Matyas Required privilege...