PT-2023-16310 · WordPress · Quickswish

Name of the Vulnerable Software and Affected Versions: QuickSwish WordPress plugin versions prior to 1.1.0 Description: The issue concerns a lack of CSRF check when activating plugins, which could allow attackers to make logged-in admins activate arbitrary plugins present on the blog via a CSRF...