Cross-site request forgery (CSRF) vulnerability in Push Notifications for WordPress (Lite) versions prior to 6.0.1 allows a remote attacker to hijack the authentication of an administrator and conduct an arbitrary operat…
CVSS 3.1HIGH 8.8·Network·No auth·User interaction·EPSS 0.00674·Published 2021-11-24·Fixed in 6.0.1CWE-352