CSRF

2019

• 25 May - Gallery – Flagallery Photo Portfolio [CSRF → File Upload]
• 17 Mar - Form Maker by WD [CSRF → LFI]
• 17 Mar - Contact Form by WD [CSRF → LFI]
• 17 Mar - Contact Form Builder [CSRF → LFI]

2017

• 12 Dec - WordPress Download Manager [CSRF]
• 12 Dec - Social Media Widget by Acurax [CSRF]
• 12 Dec - CMS Tree Page View [CSRF, Privilege Escalation]
• 12 Dec - Admin Menu Tree Page View [CSRF, Privilege Escalation]
• 12 Dec - Admin Menu Tree Page View [CSRF, Privilege Escalation]
• 03 Oct - Import users from CSV with meta [CSRF]
• 10 Aug - CMS Tree Page View [CSRF, Privilege Escalation]
• 28 Jun - WP Security Audit Log [Unauthorized Plugin Options Update - CSRF]
• 28 Jun - WP Security Audit Log [CSRF → Plugin Options Update ]
• 17 May - Share Buttons by AddThis [CSRF]
• 17 May - Add Meta Tags [CSRF]
• 04 May - ThirstyAffiliates [Multiple Vulnerabilities]
• 24 Mar - WP-Members [CSRF]
• 21 Mar - Admin Management Xtended [CSRF]
• 14 Mar - AG Custom Admin [CSRF]