Input validation vulnerability in WP Custom Admin Interface 7.33

The WP Custom Admin Interface plugin for WordPress is vulnerable to something called Cross-Site Request Forgery in versions up to and including 7.32. This means that a malicious user can delete data from the plugin without needing to be logged in or authenticated. They can do this by getting an administrator to click on a link they have created. This is a result of the wp_custom_admin_interface_delete_transients function not having the right kind of security measures in place.

Detected in:

WP Custom Admin Interface fixed vulnerable versions: >= * < 7.33

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

Is this information incorrect? Please leave us a message.