Archive
1 July 2023
Vulnerabilities first published on this day (UTC), newest first.
1 result · Clear filters · Feed
-
High 8.8
Style Kits <= 1.8.0 - Cross-Site Request Forgery Bypass
The Style Kits plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.8.0. This is due to missing or incorrect nonce validation on the update_posts_stylekit() function. This makes it possible for unauthenticated a…