Description
The WP Logs Book WordPress plugin through 1.0.1 does not have CSRF check when clearing logs, which could allow attackers to make a logged in admin clear the logs them via a CSRF attack
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | WP Logs Book | ≤ 1.0.1 | — |
References
- https://wpscan.com/vulnerability/f0c7fa00-da6e-4f07-875f-7b85759a54b3/ exploit vdb-entry technical-description