Mass Delete Unused Tags <= 2.0.0 - Cross-Site Request Forgery via plugin_mass_delete_unused_tags_init
mediumThe Mass Delete Unused Tags plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.0.0. This is due to missing or incorrect nonce validation on the 'plugin_mass_delete_unused_tags_init' function. This makes it possible for unauthenticated attackers to mass delete tags on th...
- CVSS:
- 5.4
- Affected:
- up to 2.0.0
- Fixed in:
- 3.0.0
- Disclosed:
- Mar 10, 2023