Description

Cross-site request forgery (CSRF) vulnerability in the AdminPanel in WordPress 2.1.1 and earlier allows remote attackers to perform privileged actions as administrators, as demonstrated using the delete action in wp-admin/post.php. NOTE: this issue can be leveraged to perform cross-site scripting (XSS) attacks and steal cookies via the post parameter.

Remediation

References

CVE-2007-1244

Related Vulnerabilities

Liferay Portal Weak Password Recovery Mechanism for Forgotten Password Vulnerability (CVE-2021-33321)

Apache Tomcat Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2008-5519)

SharePoint Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2020-0974)

Jenkins Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-2220)

Plone CMS Server-Side Request Forgery (SSRF) Vulnerability (CVE-2021-33511)

Severity

Medium

Classification

CVE-2007-1244

Tags

Missing Update Known Vulnerabilities