WordPress Plugin Vulnerabilities
Multi Scheduler <= 1.0.0 - Arbitrary Record Deletion via CSRF
Description
The lack of CSRF check could allow attacker to delete arbitrary records from the plugin (for example Professional ones) via a CSRF attack.
The issue is not patched, and has ben escalated to WP plugins team on May 29th, 2020
Proof of Concept
Affects Plugins
No known fix References
CVE
Exploitdb
Classification
Type
CSRF
OWASP top 10
CWE
CVSS
Miscellaneous
Original Researcher
UnD3sc0n0c1d0
Verified
Yes
WPVDB ID
Timeline
Publicly Published
2020-05-29 (about 5 years ago)
Added
2020-05-29 (about 5 years ago)
Last Updated
2020-06-23 (about 5 years ago)
WPScan 