Description
WordPress Plugin Tablesome-Responsive Table, Woocommerce Automation, Email Log, Form Automation-Contact Form 7, Elementor, WPForms, Forminator is prone to a cross-site request forgery vulnerability. Exploiting this issue may allow a remote attacker to perform certain administrative actions and gain unauthorized access to the affected application; other attacks are also possible. WordPress Plugin Tablesome-Responsive Table, Woocommerce Automation, Email Log, Form Automation-Contact Form 7, Elementor, WPForms, Forminator version 1.0.25 is vulnerable; prior versions may also be affected.
Remediation
Update to plugin version 1.0.26 or latest
References
Related Vulnerabilities
WordPress 4.5.x Multiple Vulnerabilities (4.5 - 4.5.26)
MySQL CVE-2016-0606 Vulnerability (CVE-2016-0606)
WordPress Plugin Gravity Forms Arbitrary File Upload (1.8.19)
WordPress Plugin WP Statistics Cross-Site Scripting (12.6.5)
WordPress Plugin NextGEN Gallery-WordPress Gallery PHP Object Injection (3.1.5)