WordPress Plugin Vulnerabilities

ThinkIT <= 0.3 - wp-admin/admin.php Contact Form Deletion CSRF

Description

The ThinkIT WP Contact Form WordPress plugin was affected by a wp-admin/admin.php Contact Form Deletion CSRF security vulnerability.

Affects Plugins

Plugin icon
thinkit-wp-contact-form
No known fix

References

Exploitdb
27751
URL
https://packetstormsecurity.com/files/#122898/

Classification

Type
CSRF
OWASP top 10
A2: Broken Authentication and Session Management
CWE
CWE-352

Miscellaneous

Verified
No
WPVDB ID
0d1b2363-c41b-4e37-943b-1a2e4f91e4dc

Timeline

Publicly Published
2014-08-01 (about 11 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2019-10-21 (about 6 years ago)

Other

Published
Title
Published
2025-05-16
Title
SEO Flow by LupsOnline < 3.0.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Published
2024-02-07
Title
ImageRecycle pdf & image compression < 3.1.14 - Cross-Site Request Forgery to Settings Update in disableOptimization
Published
2023-06-16
Title
LWS Tools < 2.4.2 - Cross-Site Request Forgery
Published
2025-04-25
Title
Author Box Plugin With Different Description <= 1.3.5 - Cross-Site Request Forgery
Published
2025-02-03
Title
Starter Templates by FancyWP <= 2.0.0 - Cross-Site Request Forgery to Arbitrary Plugin Installation