Maintenance Switch <= 1.5.2 - Theme Files Creation/Deletion via CSRF

2023-10-1200:00:00

wpscan.com

maintenance switch plugin

csrf checks

theme files

resetting settings

csrf attacks

AI Score

6.5

Confidence

High

EPSS

0.001

Percentile

24.1%

JSON

Description The plugin does not have CSRF checks when creating and deleting theme files as well as reseting settings, which could allow attackers to make logged in admins perform such actions via CSRF attacks