WordPress Plugin Vulnerabilities

Flash Games <= 2.2 - CSRF Bypass

Description

The plugin does not properly check for CSRF in its cgwp_search_game AJAX action, however we could not identify a risk associated with it

Affects Plugins

Plugin icon
card-games
No known fix

Classification

Type
CSRF
OWASP top 10
A2: Broken Authentication and Session Management
CWE
CWE-352
CVSS
0.0 (none)

Miscellaneous

Original Researcher
WPScanTeam
Verified
Yes
WPVDB ID
666c5e8e-cc69-4f9f-aace-f49b416f9871

Timeline

Publicly Published
2021-07-05 (about 4 years ago)
Added
2021-07-05 (about 4 years ago)
Last Updated
2021-07-05 (about 4 years ago)

Other

Published
Title
Published
2021-06-01
Title
MC4WP: Mailchimp for WordPress < 4.8.5 - Unauthorised Actions via CSRF
Published
2022-11-03
Title
Showing URL in QR Code <= 0.0.1 - Stored XSS via CSRF
Published
2025-03-24
Title
Info Boxes Shortcode and Widget <= 1.15 - Cross-Site Request Forgery
Published
2021-09-20
Title
Scroll Baner <= 1.0 - CSRF to RCE
Published
2023-04-19
Title
Liquid Speech Balloon < 1.2 - Settings Update via CSRF