cleantalk
Vulnerabilities and Security Researches

Strong Testimonials, 6b3b337d-e8d6-4fae-b17a-dc6ec49b039d

Application

Strong Testimonials

Published on
-
Research Description
Strong Testimonials [strong-testimonials] < 2.51.3 Strong Testimonials &lt; 2.51.3 - Unauthorised AJAX Call The plugin did not propely check for CSRF and authorisation in all the wpmtst_add_field_*_function functions, allowing unauthorised call of the associated AJAX actions either via low privilege users or CSRF attack
Affected versions
max 2.51.3.
Status
vulnerable