Not rated
CVE-2021-25073 The WP125 WordPress plugin before 1.5.5 does not have CSRF checks in various action, for example when deleting an ad,…
Description
The WP125 WordPress plugin before 1.5.5 does not have CSRF checks in various action, for example when deleting an ad, allowing attackers to make a logged in admin delete them via a CSRF attack
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| WP125 1.5 | earliest → < 1.5.5 | 1.5.5 |