WordPress Plugin Vulnerabilities

Ultimate Auction 1.0 - Cross-Site Request Forgery (CSRF)

Description

The Ultimate WordPress Auction Plugin WordPress plugin was affected by a Cross-Site Request Forgery (CSRF) security vulnerability.

Affects Plugins

Plugin icon
ultimate-auction
Fixed in 1.0.1

References

Exploitdb
26240
URL
https://plugins.trac.wordpress.org/changeset/730318/ultimate-auction

Classification

Type
CSRF
OWASP top 10
A2: Broken Authentication and Session Management
CWE
CWE-352

Miscellaneous

Verified
No
WPVDB ID
e1eed3cb-98f4-46e6-93b3-4d3a7be3656a

Timeline

Publicly Published
2014-08-01 (about 11 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2019-12-10 (about 6 years ago)

Other

Published
Title
Published
2023-10-25
Title
Export WP Page to Static HTML/CSS < 2.2.0 - Cross-Site Request Forgery via Multiple AJAX Actions
Published
2023-02-15
Title
WP Email Capture < 3.10 - Email Captures Update via CSRF
Published
2025-03-11
Title
WP No-Bot Question <= 0.1.7 - Cross-Site Request Forgery
Published
2025-11-13
Title
Plugin Manager < 1.4.8 - Cross-Site Request Forgery
Published
2022-01-03
Title
NextScripts: Social Networks Auto-Poster < 4.3.25 - Arbitrary Post Deletion via CSRF