WordPress Plugin Vulnerabilities

Polylang <= 2.5 - CSRF in categories and media duplication

Description

The Polylang WordPress plugin was affected by a CSRF in categories and media duplication security vulnerability.

Affects Plugins

Plugin icon
polylang
Fixed in 2.5.1

References

URL
https://plugins.trac.wordpress.org/changeset?reponame=&new=2013190%40polylang&old=1986593%40polylang

Classification

Type
CSRF
OWASP top 10
A2: Broken Authentication and Session Management
CWE
CWE-352

Miscellaneous

Verified
No
WPVDB ID
a0c2c526-ba41-4314-a93e-f9d13ccc54ed

Timeline

Publicly Published
2019-01-16 (about 7 years ago)
Added
2019-06-26 (about 6 years ago)
Last Updated
2019-06-26 (about 6 years ago)

Other

Published
Title
Published
2014-08-01
Title
uk-cookie - Cross-Site Request Forgery (CSRF)
Published
2024-11-01
Title
Seo Free <= 1.4 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Published
2020-10-29
Title
WordPress < 5.5.2 - Cross-Site Request Forgery (CSRF) to Change Theme Background
Published
2019-06-03
Title
WP Google Maps <= 7.11.27 - Admin Settings CSRF
Published
2025-01-07
Title
ldap_login_password_and_role_manager <= 1.0.12 - Cross-Site Request Forgery to Stored Cross-Site Scripting