1 result · Clear filters · Feed
-
Medium 5.4
Digital Publications by Supsystic <= 1.7.6 - Cross-Site Request Forgery via AJAX action
The Digital Publications by Supsystic plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.7.6. This is due to missing or incorrect nonce validation on the AJAX action handler. This makes it possible for unauthe…