Description
The MAZ Loader WordPress plugin before 1.4.1 does not enforce nonce checks, which allows attackers to make administrators delete arbitrary loaders via a CSRF attack
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | MAZ Loader – Preloader Builder for WordPress | 1.4.1 – < 1.4.1 | 1.4.1 |