Description
The WPBookit WordPress plugin through 1.0.7 lacks a CSRF check when deleting customers. This could allow an unauthenticated attacker to delete any customer through a CSRF attack.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | WPBookit | ≤ 1.0.7 | — |
References
- https://wpscan.com/vulnerability/e5ba488a-b43d-4c5f-9716-4b24701999f3/ exploit vdb-entry technical-description