WordPress Plugin Vulnerabilities

Remove CPT Base < 5.9 - CPT Deletion via CSRF

Description

The plugin does not have CSRF check in place when deleting the custom post type (CPT), allowing attackers to make a logged in admin do such action via a CSRF attack

Affects Plugins

Fixed in 5.9

References

Classification

Miscellaneous

Original Researcher
BEE-K
Verified
No

Timeline

Publicly Published
2022-05-06 (about 3 years ago)
Added
2022-05-21 (about 3 years ago)
Last Updated
2023-02-14 (about 3 years ago)

Other