Magical Posts Display – Elementor Advanced Posts widgets, 6a3b1b82ce44e3d051a60a588c883084815f8a11

CVE, Research URL: 6a3b1b82ce44e3d051a60a588c883084815f8a11
Home page URL: Security reports for Magical Posts Display – Elementor Advanced Posts widgets
Application: Magical Posts Display – Elementor Advanced Posts widgets
Published on: Mar 21, 2023
Research Description: Magical Posts Display – Elementor Advanced Posts widgets [magical-posts-display] < 1.2.16 (closed) WordPress Magical Posts Display – Elementor & Gutenberg Posts Blocks Plugin <= 1.2.15 is vulnerable to Cross Site Request Forgery (CSRF) Update the WordPress Magical Posts Display – Elementor & Gutenberg Posts Blocks plugin to the latest available version (at least 1.2.16). Lana Codes discovered and reported this Cross Site Request Forgery (CSRF) vulnerability in WordPress Magical Posts Display – Elementor & Gutenberg Posts Blocks Plugin. This could allow a malicious actor to force higher privileged users to execute unwanted actions under their current authentication. This vulnerability has been fixed in version 1.2.16.
Affected versions: Min -, max 1.2.16.
Status: vulnerable