WordPress Plugin Vulnerabilities

Category Specific RSS feed Subscription <= 2.0 - Cross-Site Request Forgery (CSRF)

Description

The Category Specific RSS feed Subscription WordPress plugin was affected by a Cross-Site Request Forgery (CSRF) security vulnerability.

Affects Plugins

Plugin icon
category-specific-rss-feed-menu
Fixed in 2.1

References

URL
https://jvn.jp/en/jp/JVN92510087/index.html

Classification

Type
CSRF
OWASP top 10
A2: Broken Authentication and Session Management
CWE
CWE-352

Miscellaneous

Original Researcher
Gota Abe of Cryptography Laboratory
Verified
No
WPVDB ID
51704455-6a26-4f6f-a07e-a04429bb9d6c

Timeline

Publicly Published
2019-07-18 (about 4 years ago)
Added
2019-07-18 (about 4 years ago)
Last Updated
2019-11-27 (about 4 years ago)

Other

Published
Title
Published
2023-01-05
Title
Social Warfare < 4.4.0 - Post Meta Deletion via CSRF
Published
2023-10-25
Title
Export WP Page to Static HTML/CSS < 2.2.0 - Cross-Site Request Forgery via Multiple AJAX Actions
Published
2021-10-14
Title
WP Fastest Cache < 0.9.5 - CSRF to Stored Cross-Site Scripting
Published
2023-08-11
Title
SB Child List <= 4.5 - Settings Update via CSRF
Published
2022-06-17
Title
Popup Builder < 4.1.1 - Popup Status Change via CSRF