WordPress Plugin Vulnerabilities

Dropshix < 4.0.14 - Arbitrary Product Import

Description

Due to lack of authorisation and CSRF checks in the AJAX function xoxImportItem()

Affects Plugins

Plugin icon
dropshipping-xox
Fixed in 4.0.14

References

URL
https://plugins.trac.wordpress.org/changeset?reponame=&new=2108289%40dropshipping-xox&old=2043051%40dropshipping-xox

Miscellaneous

Verified
No
WPVDB ID
71d552e0-393e-4862-bc76-6b0b06fff976

Timeline

Publicly Published
2019-06-15 (about 6 years ago)
Added
2019-06-20 (about 6 years ago)
Last Updated
2019-06-20 (about 6 years ago)

Other

Published
Title
Published
2017-06-10
Title
Responsive Menu < 3.1.4 - XSS and CSRF
Published
2014-12-31
Title
twitterDash 2.1 - CSRF & XSS
Published
2014-09-21
Title
Login Widget With Shortcode 3.1.1 - CSRF/XSS
Published
2019-07-02
Title
Insert or Embed Articulate Content into WordPress < 4.29991 - Authenticated Arbitrary Folder Deletion and Rename
Published
2019-08-12
Title
WP Social Feed Gallery < 2.4.8 - CSRF & Missing Authorisation Checks