Description
The WPGlobus plugin 1.9.6 for WordPress has CSRF via wp-admin/options.php.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Packagist | wpglobus/wpglobus | < 1.9.7 | 1.9.7 | GHSA-6fxc-v8wq-849g |
High · 8.8
CVE-2018-5361
EUVD-2022-2783GHSA-6fxc-v8wq-849g
WPGlobus plugin Stored XSS & CSRF security vulnerability
Published Jan 12, 2018 · Updated Aug 5, 2024 · Assigned by mitre