Download Theme by metagauss

Download Theme by metagauss <= 1.0.9 - CSRF

LANACOMMONVDB ID: c43dcebb-8902-48a9-8e38-aae89bb4a9e6

The plugin does not have proper Cross-Site Request Forgery (CSRF) check in some places, which could allow attackers to make logged in admins perform unwanted actions via Cross-Site Request Forgery (CSRF) attacks.

References

Source Code: https://wordpress.org/plugins/download-theme/

CVE: CVE-2022-38062

Attributes

Catgory: WordPress Plugin

Discovered: 2022-08-12

Published: not yet

Affected Version: <= 1.0.9

Classification

Type: Cross-Site Request Forgery (CSRF)

Researcher

Name: István Márton

Email: [email protected]