WordPress WP-Pro-Quiz plugin cross-site request forgery vulnerability

WordPress is the WordPress Foundation's suite of blogging platforms developed using the PHP language. The platform supports the hosting of personal blog sites on servers with PHP and MySQL. WordPress WP-Pro-Quiz plugin in version 0.37 and earlier is vulnerable to cross-site request forgery, which...

CVE-2020-36504

The WP-Pro-Quiz WordPress plugin through 0.37 does not have CSRF check in place when deleting a quiz, which could allow an attacker to make a logged in admin delete arbitrary quiz on the blog...

Cross site request forgery (csrf)

The WP-Pro-Quiz WordPress plugin through 0.37 does not have CSRF check in place when deleting a quiz, which could allow an attacker to make a logged in admin delete arbitrary quiz on the blog...

CVE-2020-36504

The CVE-2020-36504 entry affects WordPress WP-Pro-Quiz plugin versions up to 0.37. The vulnerability is a CSRF flaw: the plugin does not perform a CSRF check when deleting a quiz, enabling a logged-in administrator to delete arbitrary quizzes. Exploitation details or in-the-wild status are not pr...

WordPress 跨站请求伪造漏洞

WordPress is the WordPress Foundation's suite of blogging platforms developed using the PHP language. The platform supports the hosting of personal blog sites on servers with PHP and MySQL. WordPress WP-Pro-Quiz plugin in version 0.37 and earlier is vulnerable to cross-site request forgery, which...

WP-Pro-Quiz <= 0.37 - CSRF Leading to Arbitrary Quiz Deletion

Abusing this Cross-Site Request Forgery CSRF issue, an unauthenticated attacker could make a logged in admin delete any quiz on vulnerable website. PoC The PoC will be displayed once the issue has been remediated...

WP-Pro-Quiz <= 0.37 - CSRF Leading to Arbitrary Quiz Deletion

Abusing this Cross-Site Request Forgery CSRF issue, an unauthenticated attacker could make a logged in admin delete any quiz on vulnerable website. The PoC will be displayed once the issue has been remediated...

WordPress Wp-Pro-Quiz plugin <= 0.37 - Cross-Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability discovered by HoanHP in WordPress Wp-Pro-Quiz plugin versions = 0.37. Solution This plugin has been closed as of June 17, 2020 and is not available for download. Reason: Security Issue...