WordPress Plugin Vulnerabilities
Staff Directory < 4.0 - Cross-Site Request Forgery (CSRF)
Description
The plugin does not protect some of its actions against CSRF attacks, allowing an unauthenticated attacker to perform actions on their behalf by tricking a logged in user to submit a crafted request.
Affects Plugins
Fixed in 4.0 References
Classification
Type
CSRF
OWASP top 10
CWE
CVSS
Miscellaneous
Original Researcher
Jerome Bruandet
Verified
No
WPVDB ID
Timeline
Publicly Published
2021-06-21 (about 4 years ago)
Added
2023-07-04 (about 2 years ago)
Last Updated
2023-07-04 (about 2 years ago)
WPScan 