Non notée
CVE-2022-1895 The underConstruction WordPress plugin before 1.20 does not have CSRF check in place when deactivating the…
Description
The underConstruction WordPress plugin before 1.20 does not have CSRF check in place when deactivating the construction mode, which could allow attackers to make a logged in admin perform such action via a CSRF attack
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| underConstruction 1.20 | premières → < 1.20 | 1.20 |