The Site Notes WordPress plugin up to and including 2.0.0 does not have CSRF checks in some of its functionalities, which could allow malicious users to make logged in users perform unwanted actions, such as deleting administration notes, via CSRF attacks
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
sidenotesproject side notes |
Vulmon