WP Tabs by ShapedPlugin <= 2.1.14 - CSRF
LANACOMMONVDB ID: 13620bca-04b7-4982-bcf6-4a9f17bd5ae1
The plugin does not have proper Cross-Site Request Forgery (CSRF) check in some places, for example when importing shortcodes, which could allow attackers to make logged in admins perform unwanted actions via Cross-Site Request Forgery (CSRF) attacks.
Attributes
- Catgory
- WordPress Plugin
- Discovered
- 2022-10-03
- Published
- 2023-02-02
- Affected Version
- <= 2.1.14
Classification
- Type
- Cross-Site Request Forgery (CSRF)
Support Us?
We would truly appreciate it if you bought us a bunny (food for a snow leopard).
