Lucene search

K
wpvulndbWpvulndbWPVDB-ID:01BCB292-E683-4637-B999-66DEB0CCE0B8
HistoryOct 10, 2023 - 12:00 a.m.

GTmetrix for WordPress < 0.4.8 - Arbitrary Post Deletion via CSRF

2023-10-1000:00:00
wpscan.com
11
wordpress
plugin
csrf
vulnerability
arbitrary post deletion
security

AI Score

6.4

Confidence

High

EPSS

0.001

Percentile

24.0%

Description The plugin does not have CSRF check when deleting posts, which could allow attackers to make logged in admins perform such action via a CSRF attack

AI Score

6.4

Confidence

High

EPSS

0.001

Percentile

24.0%

Related for WPVDB-ID:01BCB292-E683-4637-B999-66DEB0CCE0B8