Non notée
CVE-2021-25073 The WP125 WordPress plugin before 1.5.5 does not have CSRF checks in various action, for example when deleting an ad,…
Description
The WP125 WordPress plugin before 1.5.5 does not have CSRF checks in various action, for example when deleting an ad, allowing attackers to make a logged in admin delete them via a CSRF attack
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| WP125 1.5 | premières → < 1.5.5 | 1.5.5 |