Filtered by vendor Wpchef Subscriptions
Filtered by product Widget Logic Subscriptions
Total 1 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2019-12826 1 Wpchef 1 Widget Logic 2024-11-21 N/A
A Cross-Site-Request-Forgery (CSRF) vulnerability in widget_logic.php in the 2by2host Widget Logic plugin before 5.10.2 for WordPress allows remote attackers to execute PHP code via snippets (that are attached to widgets and then eval'd to dynamically determine their visibility) by crafting a malicious POST request that tricks administrators into adding the code.