Description
Cross-site request forgery (CSRF) vulnerability in the SEO Plugin LiveOptim plugin before 1.1.4-free for WordPress allows remote attackers to hijack the authentication of administrators for requests that change plugin settings via unspecified vectors. NOTE: some of these details are obtained from third party information.
References
- 57990 third-party-advisory
- https://wordpress.org/plugins/liveoptim/changelog/
- seoplugin-wordpress-csrf(92586) vdb-entry