1 matches found
Redux Framework < 4.1.21 - CSRF Nonce Validation Bypass
The plugin did not properly validate some nonces, only checking them if their value was set. As a result, CSRF attacks could still be performed by not submitting the nonce in the request, bypassing the protection they are supposed to provide. Just don't send the parameters: $POST'nonce' or...
0.7AI score
SaveExploits0References4
20