Wp-property-hive

Houzez Property Feed

1 vulnerability found

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
5.4

CVE-2025-0808

  • EPSS 0.02%
  • Published 12.02.2025 04:15:09
  • Last modified 25.02.2025 03:55:57

The Houzez Property Feed plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.4.21. This is due to missing or incorrect nonce validation on the "deleteexport" action. This makes it possible for unau...