Multiple Cross Site Request Forgery (CSRF) vulnerabilities in “WordPress wp-championship plugin” (versions <= 9.2)

Details

Multiple Cross Site Request Forgery (CSRF) vulnerabilities were discovered in the WordPress wp-championship plugin (version <= 9.2).

solution

Update the WordPress WP Championship plugin to the latest version available (at least 9.3).

Sources.

wp-championship
wp-championship is a plugin for wordpress letting you play a guessing game of a tournament e.g. soccer

脆弱性情報を受け取る