Description
There is CSRF in Serendipity 2.0.5, allowing attackers to install any themes via a GET request.
Remediation
References
Related Vulnerabilities
WordPress Plugin DSGVO All in one for WP Cross-Site Scripting (4.1)
WordPress Plugin Answer My Question Multiple Cross-Site Scripting Vulnerabilities (1.1)
Oracle JRE CVE-2017-10347 Vulnerability (CVE-2017-10347)
WordPress Plugin Page Builder by SiteOrigin Cross-Site Request Forgery (2.10.15)
Liferay Portal Improper Certificate Validation Vulnerability (CVE-2022-42131)