The WP125 WordPress plugin before... CVE-2021-25073

6.8 AV AC AU C I A
发布: 2022-01-24
修订: 2024-11-21

The WP125 WordPress plugin before 1.5.5 does not have CSRF checks in various action, for example when deleting an ad, allowing attackers to make a logged in admin delete them via a CSRF attack

0%
暂无可用Exp或PoC
当前有1条受影响产品信息