Multiple WordPress plugins fixed CSRF vulnerabilities (part 1).
Many WordPress plugins were found to be vulnerable to cross-site request forgery (CSRF) attacks.
Category: Security
Critical vulnerability in WordPress Ultimate GDPR and CCPA Compliance Toolkit plugin.
The WordPress Ultimate GDPR and CCPA Compliance Toolkit plugin, which has 6,000+ sales on Envato Market, was prone to a critical unauthenticated settings import and export vulnerability affecting version 2.4 and below that could allow an attacker to redirect traffic to a malicious site among other issues.
WordPress uListing plugin fixed multiple critical vulnerabilities.
The WordPress uListing plugin (3,000+ active installations) fixed multiple critical vulnerabilities affecting version 1.6.6 and below.
Information disclosure vulnerability fixed in WordPress Doneren Met Mollie plugin.
The WordPress Doneren Met Mollie plugin (4,000+ active installations) fixed a broken access control vulnerability affecting version 2.8.4 and below that could lead to authenticated information disclosure.
Multiple vulnerabilities in WordPress WP Quick FrontEnd Editor plugin (unpatched).
The WordPress WP Quick FrontEnd Editor plugin (1,000+ active installations) is prone to a broken access control vulnerability affecting version 5.5 and below that could lead to authenticated content injection, stored XSS and settings change.