WordPress Plugin Vulnerabilities

Custom Website Data 1.2 - Record Deletion CSRF

Description

The Custom Website Data WordPress plugin was affected by a Record Deletion CSRF security vulnerability.

Affects Plugins

Plugin icon
simple-custom-website-data
Fixed in 1.3

Classification

Type
CSRF
OWASP top 10
A2: Broken Authentication and Session Management
CWE
CWE-352

Miscellaneous

Verified
No
WPVDB ID
d8ff07e6-e839-407a-ae83-b393c03f220e

Timeline

Publicly Published
2014-08-01 (about 9 years ago)
Added
2014-08-01 (about 9 years ago)
Last Updated
2015-05-15 (about 9 years ago)

Other

Published
Title
Published
2024-03-25
Title
BizPrint < 4.5.6 - Cross-Site Request Forgery to Cross-Site Scripting via process.php
Published
2021-02-17
Title
Process Steps Template Designer < 1.3 - CSRF to Stored Cross-Site Scripting (XSS)
Published
2023-03-10
Title
Auto Prune Posts < 2.0.0 - Post Deletion Settings Update via CSRF
Published
2014-08-01
Title
WP Maintenance Mode 1.8.7 - Setting Manipulation CSRF
Published
2022-11-14
Title
Feed Them Social < 3.0.1 - Settings Update via CSRF