Threats tagged 'ghsa-qpp2-xc82-6qmq'

A Cross-Site Request Forgery (CSRF) vulnerability exists in XplodedThemes WPIDE – File Manager & Code Editor affecting versions up to 3.6.4. This vulnerability allows an attacker to perform unauthorized actions on behalf of an authenticated user. The flaw has a high severity with a CVSS score of 8.8, indicating significant potential impact on confidentiality, integrity, and availability.