VYPR

WP Sticky Social

by WordPress

CVEs (1)

  • CVE-2023-3320MedJun 20, 2023
    risk 0.43cvss 6.1epss 0.02

    The WP Sticky Social plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.0.1. This is due to missing nonce validation in the ~/admin/views/admin.php file. This makes it possible for unauthenticated attackers to modify the…