WordPress Plugin Vulnerabilities

WPBook <= 3.7 - Cross-Site Request Forgery (CSRF)

Description

The WPBook WordPress plugin was affected by a Cross-Site Request Forgery (CSRF) security vulnerability.

Affects Plugins

Plugin icon
wpbook
Fixed in 3.7.1

References

Classification

Type
CSRF
OWASP top 10
A2: Broken Authentication and Session Management
CWE
CWE-352

Miscellaneous

Submitter
pvdl
Verified
No
WPVDB ID
75fb9ea8-64bc-4eb3-8214-97144899bed0

Timeline

Publicly Published
2015-02-11 (about 11 years ago)
Added
2015-02-27 (about 11 years ago)
Last Updated
2019-10-21 (about 6 years ago)

Other

Published
Title
Published
2026-01-06
Title
HelpDesk contact form plugin < 1.1.6 - Cross-Site Request Forgery to Settings Update via handle_query_args
Published
2025-02-03
Title
Child Themes Helper <= 2.2.7 - Cross-Site Request Forgery to Arbitrary File Deletion
Published
2023-05-11
Title
Forget About Shortcode Buttons < 2.1.3 - CSRF
Published
2023-01-17
Title
Crayon Syntax Highlighter <= 2.8.4 - Cross-Site Request Forgery
Published
2024-11-01
Title
ThemeFuse Maintenance Mode <= 1.1.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting