Description
The Useful Banner Manager WordPress plugin through 1.6.1 does not perform CSRF checks on POST requests to its admin page, allowing an attacker to trick a logged in admin to add, modify or delete banners from the plugin by submitting a form.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | Useful Banner Manager | 1.6.1 – ≤ 1.6.1 | — |