cleantalk
Vulnerabilities and Security Researches

Name Directory, 9a9e0665-7a36-4d96-9295-5b7ec626661a

Application

Name Directory

Published on
-
Research Description
Name Directory [name-directory] < 1.25.4 Name Directory &lt; 1.25.4 - Arbitrary Directory/Name Deletion via CSRF The plugin does not have CSRF checks in place when deleting Directories and Names, which could allow attackers to make a logged in admin delete them via a CSRF attack
Affected versions
max 1.25.4.
Status
vulnerable