Description
The WP Customer Area WordPress plugin through 8.2.4 does not have CSRF check in place when deleting its logs, which could allow attackers to make a logged in to delete them via a CSRF attack
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | WP Customer Area | ≤ 8.2.4 | — |
References
- https://wpscan.com/vulnerability/2b32c0b8-28bb-4220-800b-4c369bca91c5/ exploit vdb-entry technical-description