TI-2015-04614 CVE-2015-5483 · GHSA-5j93-rp4g-9wxpMultiple cross-site request forgery (CSRF) vulnerabilities in the Private Only plugin…Priority MEDIUM 41Multiple cross-site request forgery (CSRF) vulnerabilities in the Private Only plugin 3.5.1 for WordPress allow remote attackers to hijack the authentication of administrators for requests that (1) add users, (2) delete…CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.01584 · Published 2020-01-28 · No fix listed CWE-352