WordPress Plugin Vulnerabilities

Redirect 404 Error Page to Homepage or Custom Page with Logs < 1.7.9 - Log Deletion via CSRF

Description

The plugin does not check for CSRF when deleting logs, which could allow attacker to make a logged in admin delete them via a CSRF attack

Proof of Concept

Affects Plugins

References

Classification

Miscellaneous

Original Researcher
apple502j
Submitter
apple502j
Verified
Yes

Timeline

Publicly Published
2021-10-06 (about 4 years ago)
Added
2021-10-06 (about 4 years ago)
Last Updated
2022-04-09 (about 3 years ago)

Other