Vulnerabilities > WP Custom Cursors Project > Medium
DATE | CVE | VULNERABILITY TITLE | RISK |
---|---|---|---|
2022-10-17 | CVE-2022-3149 | Unspecified vulnerability in WP Custom Cursors Project WP Custom Cursors The WP Custom Cursors WordPress plugin before 3.0.1 does not have CSRF check in place when creating and editing cursors, which could allow attackers to made a logged in admin perform such actions via CSRF attacks. | 6.1 |
2022-10-17 | CVE-2022-3151 | Unspecified vulnerability in WP Custom Cursors Project WP Custom Cursors The WP Custom Cursors WordPress plugin before 3.0.1 does not have CSRF check in place when deleting cursors, which could allow attackers to made a logged in admin delete arbitrary cursors via a CSRF attack. | 4.3 |