| Package | Affected versions | Patched versions |
|---|---|---|
| shantz wordpress qotd | ≤ 1.2.2 |
The Shantz WordPress QOTD WordPress plugin through 1.2.2 is lacking any CSRF check when updating its settings, allowing attackers to make logged in administrators change them to arbitrary values.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free