Unscored CVE-2019-6027 EUVD-2019-15595GHSA-652g-mfhf-979g

Cross-site request forgery (CSRF) vulnerability in WP Spell Check 7.1.9 and earlier allows remote attackers to hijack the authentication of…

Published Dec 26, 2019 · Updated Aug 4, 2024 · Assigned by jpcert

Vendor: WP Spell Check Product: WP Spell Check

Description

Cross-site request forgery (CSRF) vulnerability in WP Spell Check 7.1.9 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors.

Affected products

Vendor	Product	Affected	Fixed
WP Spell Check	WP Spell Check	7.1.9 and earlier	—

References

https://wordpress.org/plugins/wp-spell-check/
http://jvn.jp/en/jp/JVN26838191/index.html