Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
WordPress Plugin WP REST API (WP API) Cross-Site Request Forgery - Vulnerability Database
WP Plugin Json Rest Api

WordPress Plugin WP REST API (WP API) Cross-Site Request Forgery

Medium
Reference: No Reference
Title: WordPress Plugin WP REST API (WP API) Cross-Site Request Forgery
Overview:

WordPress Plugin WP REST API (WP API) is prone to a cross-site request forgery vulnerability. Exploiting this issue may allow a remote attacker to serve up arbitrary Flash SWF files from the API allowing these Flash files to bypass browser cross-origin domain policies. WordPress Plugin WP REST API (WP API) version 1.1 is vulnerable prior versions may also be affected.