Description
Cross-site request forgery (CSRF) vulnerability in the underConstruction plugin before 1.09 for WordPress allows remote attackers to hijack the authentication of administrators for requests that deactivate a plugin via unspecified vectors.
References
- 93857 vdb-entry
- 52881 third-party-advisory
- http://wordpress.org/plugins/underconstruction/changelog