PT-2022-9447

Name of the Vulnerable Software and Affected Versions Orange Form WordPress plugin versions prior to 1.0.2 Description The issue concerns a lack of authorization and CSRF checks in AJAX calls within the plugin. Specifically, the or delete filed AJAX call is accessible to both unauthenticated and...