plugin

Metronet Tag Manager Vulnerabilities

1 known security issue reported for the Metronet Tag Manager WordPress plugin. Most recent disclosed May 15, 2018.

1 high

Running Metronet Tag Manager on your site? Check whether your installed version is affected.

Metronet Tag Manager < 1.2.9 - Cross-Site Request Forgery

high

Metronet Tag Manager version 1.2.7 contains a Cross site Request Forgery (CSRF) vulnerability in Settings page /wp-admin/options-general.php?page=metronet-tag-manager that allows anybody to do almost anything an admin can. This attack appear to be exploitable via Logged in user must following a link. This vulnerability...

CVSS:: 8.8
Affected:: up to 1.2.9
Fixed in:: 1.2.9
Disclosed:: May 15, 2018

CVE-2018-1000506 on NVD →

Protect your WordPress site

Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.

Scan your site free

← Back to the vulnerability database