WordPress Plugin Vulnerabilities

WPS Bidouille < 1.12.4 - Multiple Issues

Description

CSRF, Stored XSS, Arbitrary File Upload

Affects Plugins

Plugin icon
wps-bidouille
Fixed in 1.12.4

References

URL
https://secupress.me/blog/wps-bidouille-v1-12-2-multiples-vulnerabilities/

Classification

Type
CSRF
OWASP top 10
A2: Broken Authentication and Session Management
CWE
CWE-352

Miscellaneous

Original Researcher
Julio Potier
Verified
No
WPVDB ID
1d6287c0-940d-4aff-84a2-cdf49d5b5bac

Timeline

Publicly Published
2019-07-23 (about 4 years ago)
Added
2019-07-23 (about 4 years ago)
Last Updated
2019-11-27 (about 4 years ago)

Other

Published
Title
Published
2014-08-01
Title
GuiForm 1.4.10 - class/class-ajax.php Entry Saving CSRF
Published
2023-08-07
Title
GDPR Cookie Compliance < 4.12.5 - License Update/Deactivation via CSRF
Published
2022-09-14
Title
Sucuri Security < 1.8.34 - Event log Entry Creation via CSRF
Published
2014-08-01
Title
Subscribe To Comments Reloaded 140204 - options/index.php Admin Settings Manipulation CSRF
Published
2023-07-31
Title
MultiParcels Shipping For WooCommerce < 1.15.2 - Arbitrary Shipment Deletion via CSRF