Vulnerabilities (CVE)

Filtered by vendor Webmaster-source Subscribe
Filtered by product Wp125
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2021-25073 1 Webmaster-source 1 Wp125 2022-01-27 6.8 MEDIUM 8.8 HIGH
The WP125 WordPress plugin before 1.5.5 does not have CSRF checks in various action, for example when deleting an ad, allowing attackers to make a logged in admin delete them via a CSRF attack