Multi Scheduler <= 1.0.0 - Arbitrary Record Deletion via CSRF

2020-05-2900:00:00

wpvulndb

0.015 Low

EPSS

Percentile

86.8%

JSON

The lack of CSRF check could allow attacker to delete arbitrary records from the plugin (for example Professional ones) via a CSRF attack. The issue is not patched, and has ben escalated to WP plugins team on May 29th, 2020

The PoC will be displayed once the issue has been remediated

References

vulners.com/exploitdb/EDB-ID:48532

0.015 Low

EPSS

Percentile

86.8%

JSON

Related for WPEX-ID:DFCDBEFD-5D17-4A64-B797-92192360B070