CVE-2015-9418

The Watu Pro plugin before 4.9.0.8 for WordPress has CSRF that allows an attacker to delete quizzes.

Score

CVSS 3.1 4.3 Medium

Status

Modified - cve@mitre.org

Published

2019-09-26

Last modified

2024-08-06

Weaknesses

CWE-352

Affected products

• Watupro (Kibokolabs)

References

• https://advisories.dxw.com/advisories/csrf-in-watu-pro-allows-unauthenticated-attackers-to-delete-quizzes/
• https://wordpress.org/plugins/watupro/#developers
• https://calendarscripts.info/watupro/