Deny All Firewall <= 1.1.6 - Cross-Site Request Forgery
highThe Deny All Firewall plugin before 1.1.7 for WordPress allows wp-admin/options-general.php?page=daf_settings&daf_remove=true CSRF.
- CVSS:
- 8.8
- Affected:
- up to 1.1.6
- Fixed in:
- 1.1.7
- Disclosed:
- Jun 22, 2019