Cross-site request forgery (CSRF) vulnerability in wlcms-plugin.php in the White Label CMS plugin before 1.5.1 for WordPress allows remote attackers to hijack the authentication of administrators for requests that modify the developer name via the wlcms_o_developer_name parameter in a save action to wp-admin/admin.php, as demonstrated by a developer name containing XSS sequences.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| White Label Cms Plugin | — | Update white-label-cms plugin to version 1.5.1, or a newer patched version | May 15, 2025 | Oct 21, 2012 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub