MouseWheel Smooth Scroll <= 5.6 - Plugin's Setting Update via Cross-Site Request Forgery
mediumThe MouseWheel Smooth Scroll WordPress plugin before 5.7 does not have CSRF check in place on its settings page, which could allow attackers to make a logged in admin change them via a CSRF attack
- CVSS:
- 6.5
- Affected:
- up to 5.6
- Fixed in:
- 5.7
- Disclosed:
- Oct 18, 2021