PT-2022-9459

Name of the Vulnerable Software and Affected Versions The Perfect Survey WordPress plugin versions prior to 1.5.2 Description The issue is related to the lack of proper authorization and CSRF checks in the save global setting AJAX action. This allows unauthenticated users to edit surveys and modi...

WordPress plugin cross-site request forgeing vulnerability

WordPress is a set of blogging platforms developed by the WordPress Foundation using the PHP language. WordPress Perfect Survey plugin in versions prior to 1.5.2 has a cross-site request forgery vulnerability, which stems from the absence of CSRF in the saveglobalsetting AJAX action check, an...