WordPress CSV Importer Plugin <= 0.3.8 is vulnerable to Cross Site Request Forgery (CSRF)

Software CSV Importer Type Plugin Vulnerable versions = 0.3.8 Fixed in 0.3.9 OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-49775 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 940182804bef Credits Nguyen Xuan Chien...

CVE-2018-20967

The wp-ultimate-csv-importer plugin before 5.6.1 for WordPress has CSRF...