WordPress Plugin Vulnerabilities

WP User Groups < 2.1.0 - Cross-Site Request Forgery (CSRF)

Description

CSRF allows modification of user groups and types.

Affects Plugins

Plugin icon
wp-user-groups
Fixed in 2.1.0

References

URL
https://advisories.dxw.com/advisories/csrf-wp-user-groups/
URL
https://plugins.trac.wordpress.org/changeset/1859268/wp-user-groups
URL
https://seclists.org/fulldisclosure/2018/May/27

Classification

Type
CSRF
OWASP top 10
A2: Broken Authentication and Session Management
CWE
CWE-352

Miscellaneous

Submitter
Ryan
Submitter twitter
ethicalhack3r
Verified
No
WPVDB ID
d973410b-eb5d-47db-a30a-3631389f581a

Timeline

Publicly Published
2018-05-11 (about 8 years ago)
Added
2018-05-14 (about 7 years ago)
Last Updated
2019-11-01 (about 6 years ago)

Other

Published
Title
Published
2025-03-11
Title
Insert Code <= 2.4 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Published
2025-01-27
Title
Post Carousel Slider <= 2.0.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Published
2023-11-12
Title
ShiftController Employee Shift Scheduling < 4.9.24 - CSRF
Published
2025-01-17
Title
Webcamconsult < 1.6.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Published
2023-10-03
Title
Taboola < 2.0.2 - CSRF