CVE-2021-20780

CVE-2021-20780 affects the WordPress plugin WPCS – WordPress Currency Switcher (versions 1.1.6 and earlier). The vulnerability is a Cross-site Request Forgery (CSRF) that can allow an attacker, while a logged-in admin views a malicious page, to perform unintended actions and hijack administrator ...

CVE-2021-20780

Cross-site request forgery CSRF vulnerability in WPCS - WordPress Currency Switcher 1.1.6 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors...

JVN#91372527: WordPress Plugin "WPCS - WordPress Currency Switcher" vulnerable to cross-site request forgery

WordPress Plugin "WPCS – WordPress Currency Switcher" provided by realmag777 contains a cross-site request forgery vulnerability CWE-352. Impact If a user views a malicious page while logged in to the affected system with an administrative privilege, unintended operations may be performed. Soluti...

WPCS < 1.1.7 - Arbitrary Plugin's Settings Change via CSRF

The plugin did not have any CSRF in place when saving its options, which could allow attacker to make a logged in administrator change them...

WordPress WPCS plugin <= 1.1.6 - Cross-Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability discovered by Mizuki Takagi Cryptography Laboratory, Tokyo Denki University in WordPress WPCS plugin versions = 1.1.6. Solution Update the WordPress WPCS plugin to the latest available version at least 1.1.7...