WordPress Plugin Vulnerabilities

WP Frontend Profile < 1.2.2 - CSRF Check Incorrectly Implemented

Description

The WP Frontend Profile WordPress plugin did not verify the Cross-Site Request Forgery (CSRF) nonce correctly.

Affects Plugins

Plugin icon
wp-front-end-profile
Fixed in 1.2.2

References

URL
https://github.com/glowlogix/wp-frontend-profile/issues/52

Miscellaneous

Original Researcher
Julio Potier
Verified
No
WPVDB ID
00b6d363-700f-4b01-81a0-671ed58520f8

Timeline

Publicly Published
2020-05-19 (about 6 years ago)
Added
2020-05-22 (about 6 years ago)
Last Updated
2020-05-23 (about 6 years ago)

Other

Published
Title
Published
2024-08-30
Title
IP Vault – WP Firewall < 2.1 - IP Address Spoofing to Protection Mechanism Bypass
Published
2016-11-10
Title
W3 Total Cache < 0.9.5 - Weak Validation of Amazon SNS Push Messages
Published
2016-12-08
Title
WooCommerce Email Test 1.5 - Order Information Disclosure
Published
2022-12-27
Title
FluentAuth < 1.0.2 - Bypass blocks by IP Spoofing
Published
2022-08-22
Title
Login No Captcha reCAPTCHA < 1.7 - IP Check Bypass