← All advisories

High severity8.8NVD Advisory· Published Dec 29, 2020· Updated Jun 17, 2026

CVE-2020-35773

CVE-2020-35773

Description

The site-offline plugin before 1.4.4 for WordPress lacks certain wp_create_nonce and wp_verify_nonce calls, aka CSRF.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

1

WordPress/site-offlinellm-create
Range: <1.4.4

Patches

Vulnerability mechanics

References

5

plugins.trac.wordpress.org/changeset/2445009/nvdPatchThird Party Advisory
advisory.checkmarx.net/advisory/CX-2020-4292nvdExploitThird Party Advisory
developer.wordpress.org/reference/functions/wp_create_nonce/nvdThird Party Advisory
developer.wordpress.org/reference/functions/wp_verify_nonce/nvdThird Party Advisory
wordpress.org/plugins/site-offline/nvdProductThird Party Advisory

News mentions

0

No linked articles in our index yet.