cleantalk
Vulnerabilities and Security Researches

WP Simple Spreadsheet Fetcher for Google, f224ff37-4126-49bc-b432-0d1e177abec8

Published on
-
Research Description
WP Simple Spreadsheet Fetcher for Google [wp-simple-spreadsheet-fetcher-for-google] < 0.3.7 WP Simple Spreadsheet Fetcher For Google &lt; 0.3.7 - Arbitrary API Key update via CSRF The lack of Cross-Site Request Forgery (CSRF) checks on the plugin&#039;s settings page could allow CSRF attacks to set an arbitrary API key.
Affected versions
max 0.3.7.
Status
vulnerable