Lucene search

K
wpvulndbRubymanWPVDB-ID:1735CA00-D6FE-46D0-B00C-A55BEDEDDF1C
HistoryJul 27, 2019 - 12:00 a.m.

Simple Membership <= 3.8.4 - Cross-Site Request Forgery (CSRF)

2019-07-2700:00:00
rubyman
wpscan.com
3

0.005 Low

EPSS

Percentile

75.4%

CSRF issue in the Bulk Operation menu tab

PoC

https://youtu.be/HkTD8DhhwhM https://gofile.io/?c=zWYnLM - CSRF html files

CPENameOperatorVersion
simple-membershiplt3.8.5

0.005 Low

EPSS

Percentile

75.4%