CVE-2018-20972

CVE-2018-20972 is a CSRF vulnerability in the WordPress plugin companion-auto-update prior to version 3.2.1. The connected sources consistently describe an insufficient verification of request origin that allows cross-site requests to perform unintended actions on behalf of an authenticated user....

CVE-2018-20973

CVE-2018-20973 concerns the WordPress plugin companion-auto-update before version 3.2.1, which contains a local file inclusion (LFI) vulnerability. The issue arises in the plugin, enabling an attacker to access local files on the server. Public references in the provided documents consistently de...