Description
WordPress Plugin WP Security Safe is prone to a cross-site request forgery vulnerability. Exploiting this issue may allow a remote attacker to perform certain administrative actions and gain unauthorized access to the affected application; other attacks are also possible. WordPress Plugin WP Security Safe version 2.2.2 is vulnerable; prior versions may also be affected.
Remediation
Update to plugin version 2.2.3 or latest
References
Related Vulnerabilities
Magento Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2021-21014)
WordPress Plugin WP-UserOnline Cross-Site Scripting (2.87.6)
XWikiplatform Insertion of Sensitive Information Into Sent Data Vulnerability (CVE-2025-49584)
WordPress 5.1.x Multiple Vulnerabilities (5.1 - 5.1.15)
Apache HTTP Server Out-of-bounds Write Vulnerability (CVE-2006-20001)