PT-2021-23596

Name of the Vulnerable Software and Affected Versions Stetic WordPress plugin versions up to, and including 1.0.6 Description The issue is related to Cross-Site Request Forgery due to missing nonce validation via the stats page function found in the /stetic.php file. This allowed attackers to...

CVE-2021-42364: Cross-Site Request Forgery (CSRF)

The Stetic WordPress plugin is vulnerable to Cross-Site Request Forgery due to missing nonce validation via the statspage function found in the /stetic.php file, which made it possible for attackers to inject arbitrary web scripts in versions up to, and including 1.0.6...