WordPress Uninstall [uninstall] <= 1.2.1
unknown[en] The uninstall plugin before 1.2 for WordPress has CSRF to delete all tables via the wp-admin/admin-ajax.php?action=uninstall URI.
- Affected:
- up to 1.2.1
- Fixed in:
- 1.2.1
- Disclosed:
- Aug 20, 2019
plugin
3 known security issues reported for the Uninstall WordPress plugin. Most recent disclosed Aug 20, 2019.
Running Uninstall on your site? Check whether your installed version is affected.
Scan your site free[en] The uninstall plugin before 1.2 for WordPress has CSRF to delete all tables via the wp-admin/admin-ajax.php?action=uninstall URI.
The uninstall plugin before 1.2 for WordPress has CSRF to delete all tables via the wp-admin/admin-ajax.php?action=uninstall URI.
Because of this vulnerability, it is possible to delete all WordPress database files and tables. Upgrade this plugin.
Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.
Scan your site free