Security Advisory

CVE-2022-0616

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2022-03-21 18:55:50
Last updated 2024-08-02 23:32:46
Assigner WPScan
State PUBLISHED

Description

The Amelia WordPress plugin before 1.0.47 does not have CSRF check in place when deleting customers, which could allow attackers to make a logged in admin delete arbitrary customers via a CSRF attack