title: Site Notes <= 2.0.0 - Admin Note Deletion via CSRF
description: The Site Notes WordPress plugin through 2.0.0 does not have CSRF checks in some of its functionalities, which could allow attackers to make logged in users perform unwanted actions, such as deleting administration notes, via CSRF attacks
problem types: CWE-352 Cross-Site Request Forgery (CSRF)
affected:
{
vendor: Unknown
product: Site Notes
versions:
status: affected, versionType: semver, version: 0, lessThanOrEqual: 2.0.0
defaultStatus: affected
collectionURL: https://wordpress.org/plugins
}