Multi Step Form < 1.7.13 - Form Update/Deletion via CSRF

2023-11-2900:00:00

wpscan.com

csrf

form update

form deletion

security flaw

multi step form

AI Score

6.9

Confidence

High

EPSS

0.001

Percentile

24.1%

JSON

Description The plugin does not have CSRF checks when deleting, updating and duplicating forms, which could allow attackers to make logged in admins perform such actions via CSRF attacks

References

patchstack.com/database/vulnerability/multi-step-form/wordpress-multi-step-form-plugin-1-7-11-cross-site-request-forgery-csrf-vulnerability