WordPress Plugin Vulnerabilities
Qtranslate Slug <= 1.1.18 - Cross-Site Request Forgery
Description
The plugin does not correctly validate nonces in the save_postdata() function, which could lead to Cross-Site Request Forgery. This may enable unauthenticated users to save post data via a fraudulent request if they can deceive a site administrator into clicking on a manipulated link.
Affects Plugins
No known fix References
Classification
Type
CSRF
OWASP top 10
CWE
CVSS
Miscellaneous
Original Researcher
Jerome Bruandet
Verified
No
WPVDB ID
Timeline
Publicly Published
2021-06-08 (about 4 years ago)
Added
2023-07-12 (about 2 years ago)
Last Updated
2023-07-12 (about 2 years ago)
WPScan 