WordPress Plugin Vulnerabilities

Group Documents 1.2.1 - Document Property Manipulation CSRF

Description

The BP Group Documents WordPress plugin was affected by a Document Property Manipulation CSRF security vulnerability.

Affects Plugins

Plugin icon
bp-group-documents
Fixed in 1.2.2

References

URL
https://seclists.org/fulldisclosure/2014/Feb/170

Classification

Type
CSRF
OWASP top 10
A2: Broken Authentication and Session Management
CWE
CWE-352

Miscellaneous

Verified
No
WPVDB ID
81ed5b68-f3ba-4ccc-bfbc-87cb99717cfe

Timeline

Publicly Published
2014-08-01 (about 11 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2019-10-21 (about 6 years ago)

Other

Published
Title
Published
2024-04-24
Title
CM Tooltip Glossary < 4.3.0 - Settings Update via CSRF
Published
2024-11-22
Title
Simple Travel Map <= 0.1 - Cross-Site Request Forgery
Published
2015-03-22
Title
PlusCaptcha Plugin < 2.1.0 - Cross-Site Request Forgery (CSRF)
Published
2025-06-05
Title
Interactive Regional Map of Africa <= 1.0 - Cross-Site Request Forgery
Published
2025-04-09
Title
WP SexyLightBox <= 0.5.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting