Lucene search
+L

4 matches found

WPVulnDB
WPVulnDB
added 2023/10/12 12:0 a.m.18 views

Maintenance Switch <= 1.5.2 - Theme Files Creation/Deletion via CSRF

Description The plugin does not have CSRF checks when creating and deleting theme files as well as reseting settings, which could allow attackers to make logged in admins perform such actions via CSRF attacks...

8.8CVSS6.5AI score0.00208EPSS
SaveExploits0
Rows per page
Query Builder