WordPress Plugin Vulnerabilities

GuiForm 1.4.10 - class/class-ajax.php Entry Saving CSRF

Description

The guiform WordPress plugin was affected by a class/class-ajax.php Entry Saving CSRF security vulnerability.

Affects Plugins

Plugin icon
guiform
Fixed in 1.5.0

Classification

Type
CSRF
OWASP top 10
A2: Broken Authentication and Session Management
CWE
CWE-352

Miscellaneous

Verified
No
WPVDB ID
5438d5b0-8879-4579-b2a0-0e66dc90c77b

Timeline

Publicly Published
2014-08-01 (about 11 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2015-05-15 (about 10 years ago)

Other

Published
Title
Published
2024-01-23
Title
WP-Reply Notify <= 1.1 - Settings Update via CSRF
Published
2024-08-01
Title
WordPress Menu Plugin — Superfly Responsive Menu < 5.0.30 - Cross-Site Request Forgery to Arbitrary File Deletion
Published
2021-06-14
Title
Vik Rent Car < 1.1.7 - CSRF to Stored XSS
Published
2022-01-27
Title
WP Google Map < 1.8.4 - Arbitrary Post Deletion and Plugin's Settings Update via CSRF
Published
2023-09-28
Title
Kv TinyMCE Editor Add Fonts <= 1.1 - Font List Update via CSRF