high8.8
CVE-2021-25073
The WP125 WordPress plugin before 1.5.5 does not have CSRF checks in various action, for example when deleting an ad, allowing attackers to make a logged in ad…
Impact
The WP125 WordPress plugin before 1.5.5 does not have CSRF checks in various action, for example when deleting an ad, allowing attackers to make a logged in admin delete them via a CSRF attack
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Webmaster-Source | Wp125 | before 1.5.5 |