Skip to content
OpenAdvisories

Vendor

laudanumsoft

1 known vulnerabilities.

1 result · Clear filters · Feed

  • Medium 4.3

    MPWizard – Create Mercado Pago Payment Links <= 1.2.1 - Cross-Site Request Forgery to Arbitrary Post Deletion

    The MPWizard – Create Mercado Pago Payment Links plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.2.1. This is due to missing or incorrect nonce validation in the '/includes/admin/class-mpwizard-table.ph…