The WP125 WordPress plugin before 1.5.5 does not have...
High severity
Unreviewed
Published
Jan 25, 2022
to the GitHub Advisory Database
•
Updated Feb 3, 2023
Description
Published by the National Vulnerability Database
Jan 24, 2022
Published to the GitHub Advisory Database
Jan 25, 2022
Last updated
Feb 3, 2023
The WP125 WordPress plugin before 1.5.5 does not have CSRF checks in various action, for example when deleting an ad, allowing attackers to make a logged in admin delete them via a CSRF attack
References