The Deny All Firewall plugin before 1.1.7 for WordPress allows wp-admin/options-general.php?page=daf_settings&daf_remove=true CSRF.

Published Aug 8, 2019 · Updated Aug 5, 2024 · Assigned by mitre