Lucene search

K
wpvulndbWpvulndbWPVDB-ID:A933A990-C285-42E7-BA93-847C89FE7048
HistoryFeb 02, 2023 - 12:00 a.m.

Formidable Forms < 5.5.7 - Arbitrary Entry Deletion via CSRF

2023-02-0200:00:00
wpscan.com
9
formidable forms
csrf
arbitrary deletion
security issue
software

0.001 Low

EPSS

Percentile

27.7%

The plugin does not have CSRF check when deleting entries, which could allow attackers to make logged in admins perform such action via a CSRF attack

CPENameOperatorVersion
formidablelt6.1

0.001 Low

EPSS

Percentile

27.7%

Related for WPVDB-ID:A933A990-C285-42E7-BA93-847C89FE7048