CVE-2020-35135 – Ultimate Category Excluder <= 1.1 - Cross-Site Request Forgery

https://notcve.org/view.php?id=CVE-2020-35135

08 Jan 2020 — The ultimate-category-excluder plugin before 1.2 for WordPress allows ultimate-category-excluder.php CSRF. El plugin ultimate-category-excluder versiones anteriores a 1.2 para WordPress, permite un ataque de tipo CSRF en el archivo ultimate-category-excluder.php The Ultimate Category Excluder plugin before 1.2 for WordPress allows ultimate-category-excluder.php CSRF. • https://advisory.checkmarx.net/advisory/CX-2020-4294 • CWE-352: Cross-Site Request Forgery (CSRF) •