Description
The WP125 WordPress plugin before 1.5.5 does not have CSRF checks in various action, for example when deleting an ad, allowing attackers to make a logged in admin delete them via a CSRF attack
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | WP125 | 1.5.5 – < 1.5.5 | 1.5.5 |