CVE-2017-8099

There is CSRF in the WHIZZ plugin before 1.1.1 for WordPress, allowing attackers to delete any WordPress users and change the plugin's status via a GET request

published April 24, 2017

CVSS
—
EPSS
1%
Percentile
49.7
In the wild
Unconfirmed
What it is

There is CSRF in the WHIZZ plugin before 1.1.1 for WordPress, allowing attackers to delete any WordPress users and change the plugin's status via a GET request.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00639 · 49.7th percentile
Published
2017-04-24T18:00Z
EPSS history
Timeline
  • 24 APR 18:00Z
    There is CSRF in the WHIZZ plugin before 1.1.1 for WordPress, allowing attackers to delete any WordPress users and change the plugin's status via a GET request
    cvelistv5