Skip to content
OpenAdvisories

Product · supsysticcom

WordPress Flipbook by Supsystic

1 known vulnerabilities.

1 result · Clear filters · Feed

  • Medium 5.4

    Digital Publications by Supsystic <= 1.7.6 - Cross-Site Request Forgery via AJAX action

    The Digital Publications by Supsystic plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.7.6. This is due to missing or incorrect nonce validation on the AJAX action handler. This makes it possible for unauthe…