bbPress Login Register Links On Forum Topic Pages <= 2.7.5 - Cross-Site Request Forgery
mediumThe bbPress Login Register Links On Forum Topic Pages plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.7.5. This is due to missing nonce validation on the bbPressCustomMenu(), tomas_bbPressLoginAdminBar(), tomas_bbPressCustomLoginRedirect(), and tomas_bbPressCustomLog...
- CVSS:
- 5.4
- Affected:
- up to 2.7.5
- Fixed in:
- 2.8.5
- Disclosed:
- Dec 27, 2019