WordPress Plugin Vulnerabilities
Strong Testimonials < 2.51.3 - Unauthorised AJAX Call
Description
The plugin did not propely check for CSRF and authorisation in all the wpmtst_add_field_*_function functions, allowing unauthorised call of the associated AJAX actions either via low privilege users or CSRF attack
Proof of Concept
Affects Plugins
Fixed in 2.51.3 Miscellaneous
Original Researcher
WPScanTeam
Verified
Yes
WPVDB ID
Timeline
Publicly Published
2021-06-30 (about 4 years ago)
Added
2021-06-30 (about 4 years ago)
Last Updated
2021-06-30 (about 4 years ago)
WPScan 