WordPress Plugin Vulnerabilities
Redux Framework 4.1.22 - 4.1.23 - CSRF Nonce Validation Bypass
Description
The plugin re-introduced a CSRF bypass issue in v4.1.22, as the nonce is only checked if present in the request.
Affects Plugins
Fixed in version 4.1.24
References
Classification
Miscellaneous
Timeline
Publicly Published
2020-12-15 (about 2 years ago)
Added
2020-12-15 (about 2 years ago)
Last Updated
2020-12-16 (about 2 years ago)