Classic Editor +, 9de1809c770d7926b5b7e9ee95199ef6179b6d64

CVE, Research URL: 9de1809c770d7926b5b7e9ee95199ef6179b6d64
Home page URL: Security reports for Classic Editor +
Application: Classic Editor +
Published on: Jan 24, 2022
Research Description: Classic Editor + [classic-editor-addon] < 2.6.4 WordPress Classic Editor Addon plugin <= 2.6.3 - Arbitrary Plugin Installation from Dependency via Cross-Site Request Forgery (CSRF) vulnerability Arbitrary Plugin Installation from Dependency via Cross-Site Request Forgery (CSRF) vulnerability discovered by Jan w Oleju in WordPress Classic Editor Addon plugin (versions <= 2.6.3).
Affected versions: max 2.6.4.
Status: vulnerable