Description
The has a CSRF vulnerability that allows the deletion of a post without using a nonce or prompting for confirmation.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | Ask me | < 6.8.7 | 6.8.7 |
References
- https://wpscan.com/vulnerability/5019db80-0356-497d-b488-a26a5de78676 exploit vdb-entry technical-description