Cross-Site Request Forgery (CSRF) vulnerability in John James Jacoby WP Term Order wp-term-order allows Cross Site Request Forgery.This issue affects WP Term Order: from n/a through <= 2.1.0.
> AFFECTED_PRODUCTS
ℹ️ Aucun produit affecté n'a encore été publié par NVD pour cette CVE.
CWE-352: Cross-Site Request Forgery - The web application does not, or cannot, sufficiently verify whether a request was intentionally provided by the user who sent the request, which could have originated from an unauthorized actor.
> HISTORIQUE DES MODIFICATIONS
Première apparition
23/01/2026 15:16
Source: NVD
📊
ENRICHISSEMENT
01/11/2026 06:58
CWE
Champ modifié: Description CWE
Ancienne valeur:
CWE-352: Cross-Site Request Forgery (CSRF) - The web application does not, or cannot, sufficiently verify whether a request was intentionally provided by the user who sent the request, which could hav...
Nouvelle valeur:
CWE-352: Cross-Site Request Forgery - The web application does not, or cannot, sufficiently verify whether a request was intentionally provided by the user who sent the request, which could have origi...
📊
ENRICHISSEMENT
01/02/2026 06:45
CWE
Champ modifié: Description CWE
Ancienne valeur:
N/A
Nouvelle valeur:
CWE-352: Cross-Site Request Forgery (CSRF) - The web application does not, or cannot, sufficiently verify whether a request was intentionally provided by the user who sent the request, which could hav...
Total des modifications: 2
Dernière mise à jour: 1 week ago