Multiple Plugins from Viszt Peter - Cross-Site Request Forgery
highThe plugins 'Integration for Billingo & Gravity Forms' up to version 1.0.3, 'Integration for Szamlazz.hu & Gravity Forms' up to version 1.2.6, and 'Woo Billingo Plus' up to version 4.4.5.3 for WordPress are vulnerable to Cross-Site Request Forgery. This is due to missing or incorrect nonce validation in various AJAX a...
- CVSS:
- 8.8
- Affected:
- up to 1.0.3
- Fixed in:
- 1.0.4
- Disclosed:
- Sep 14, 2022