Description
There is CSRF in the WHIZZ plugin before 1.1.1 for WordPress, allowing attackers to delete any WordPress users and change the plugin's status via a GET request.
Unscored
CVE-2017-8099
EUVD-2017-17062GHSA-fmcg-p686-j68g
There is CSRF in the WHIZZ plugin before 1.1.1 for WordPress, allowing attackers to delete any WordPress users and change the plugin's stat…
Published Apr 24, 2017 · Updated Sep 17, 2024 · Assigned by mitre