WP Inventory Manager < 2.1.0.14 - Inventory Items Deletion via CSRF
3Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackepss 0.4%
exploitation probability
0.4%top 74% of all CVEs
observed exploitation
nono source reports it
The WP Inventory Manager WordPress plugin before 2.1.0.14 does not have CSRF checks, which could allow attackers to make logged-in admins delete Inventory Items via a CSRF attack
Affected products
Unknown · WP Inventory Manager