Cross-Site Request Forgery Vulnerability in Easy Property Listings by WordPress

CVE-2020-5530

What is CVE-2020-5530?

A cross-site request forgery (CSRF) vulnerability exists in Easy Property Listings prior to version 3.4, which allows remote attackers to exploit this weakness. By sending specially crafted requests, an attacker can hijack the authentication of administrators, potentially leading to unauthorized access and control over the plugin. This type of vulnerability emphasizes the need for stringent security measures to protect administrative functions from deceptive external requests.

References