medium4.3
CVE-2015-9418
The Watu Pro plugin before 4.9.0.8 for WordPress has CSRF that allows an attacker to delete quizzes.
Impact
The Watu Pro plugin before 4.9.0.8 for WordPress has CSRF that allows an attacker to delete quizzes.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Kibokolabs | Watupro | before 4.9.0.8 |
Weakness classification
References
- NVD record
- CVE.org record
- https://advisories.dxw.com/advisories/csrf-in-watu-pro-allows-unauthenticated-attackers-to-delete-quizzes/
- https://wordpress.org/plugins/watupro/#developers
- https://calendarscripts.info/watupro/
- https://advisories.dxw.com/advisories/csrf-in-watu-pro-allows-unauthenticated-attackers-to-delete-quizzes/
- https://wordpress.org/plugins/watupro/#developers