WP Debugging, 49680f00-ce9d-4089-ad50-034407f428f3

CVE, Research URL: 49680f00-ce9d-4089-ad50-034407f428f3
Home page URL: Security reports for WP Debugging
Application: WP Debugging
Published on: -
Research Description: WP Debugging [wp-debugging] < 2.11.7 WP Dependency Installer < 4.3.1 - Arbitrary Plugin Installation from Dependency via CSRF The wp-dependency-installer library, used in the plugins, does not have CSRF check in its dependency_installer AJAX action with the install method, which could allow attackers to make a logged in admin install plugins defined in the wp-dependencies.json via a CSRF attack.
Affected versions: max 2.11.7.
Status: vulnerable