WordPress Plugin Vulnerabilities

Bbp Move Topics < 1.1.6 - Code Injection & CSRF

Description

The bbPress Move Topics WordPress plugin was affected by a Code Injection & CSRF security vulnerability.

Affects Plugins

Plugin icon
bbp-move-topics
Fixed in 1.1.6

References

CVE
CVE-2018-21005
CVE
CVE-2018-21006

Miscellaneous

Verified
No
WPVDB ID
897f1db8-e943-41cd-a1dd-559c8013a303

Timeline

Publicly Published
2018-03-11 (about 8 years ago)
Added
2019-08-27 (about 6 years ago)
Last Updated
2020-09-22 (about 5 years ago)

Other

Published
Title
Published
2021-07-12
Title
Frontend File Manager < 18.3 - Authenticated Arbitrary Settings Change to Arbitrary File Upload
Published
2014-08-01
Title
Let Them Unsubscribe 1.0 - let-them-unsubscribe.php Multiple Unspecified Issues
Published
2015-05-02
Title
Ad Inserter 1.5.2 - CSRF & XSS
Published
2015-03-17
Title
Import any XML or CSV File to WordPress <= 3.2.4 - Multiple Vulnerabilities
Published
2016-04-17
Title
Kento Post View Counter <= 2.8 - CSRF & multiple XSS