Unpatched CSRF flaw in older plugin versions
Old Post View Count versions carry a cross-site request forgery flaw that stayed unpatched across several releases.
Tier II · Emerging Problems that are still building up.
4 public reports · first reported 6 October 2023 · last reported 7 February 2024
What's going wrong
Several site owners report that the Post View Count plugin has a known cross-site request forgery weakness, which can let an attacker trick a logged-in user into performing unwanted actions.
AI-assisted: written with the help of AI from the reports. The idea report has the full summary.
In the idea report
- The full summary.
- The products the 4 reports are about, and how many came each month.
- Related problems.
No business has been found with this problem yet, so the report has no contacts. All sales are final — no refunds. Pricing.