WP Inventory Manager < 2.1.0.14 - Inventory Items Deletion via CSRF

2023-06-0500:00:00

NGO VAN TU

vulnerability

csrf

inventory deletion

wp inventory manager

exploit

0.001 Low

EPSS

Percentile

30.7%

JSON

The plugin does not have CSRF checks, which could allow attackers to make logged-in admins delete Inventory Items via a CSRF attack

Send a payload to logged-in admins with a request to http://127.0.0.1/wordpress/wp-admin/admin.php?page=wpim_manage_inventory_items&action=delete&delete_id=2

0.001 Low

EPSS

Percentile

30.7%

JSON

Related for WPEX-ID:0357ECC7-56F5-4843-A928-BF2D3CE75596