high8.1
CVE-2023-2842
The WP Inventory Manager WordPress plugin before 2.1.0.14 does not have CSRF checks, which could allow attackers to make logged-in admins delete Inventory Item…
Impact
The WP Inventory Manager WordPress plugin before 2.1.0.14 does not have CSRF checks, which could allow attackers to make logged-in admins delete Inventory Items via a CSRF attack
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Wpinventory | Wp Inventory Manager | before 2.1.0.14 |