Skip to content
OpenAdvisories
Unscored CVE-2022-1845 EUVD-2022-25121GHSA-jpvc-cfc6-xwc3

WP Post Styling < 1.3.1 - Multiple CSRF

Published Jun 27, 2022 · Updated Aug 3, 2024 · Assigned by WPScan

Description

The WP Post Styling WordPress plugin before 1.3.1 does not have CSRF checks in various actions, which could allow attackers to make a logged in admin delete plugin's data, update the settings, add new entries and more via CSRF attacks

Affected products

VendorProductAffectedFixed
— WP Post Styling 1.3.1 – < 1.3.1 1.3.1

References