4.3
Moyenne
CVE-2022-3151 The WP Custom Cursors WordPress plugin before 3.0.1 does not have CSRF check in place when deleting cursors, which could…
Description
The WP Custom Cursors WordPress plugin before 3.0.1 does not have CSRF check in place when deleting cursors, which could allow attackers to made a logged in admin delete arbitrary cursors via a CSRF attack.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| WP Custom Cursors 3.0 | premières → < 3.0.1 | 3.0.1 |