title: Useful Banner Manager <= 1.6.1 - Modify banners via CSRF
description: The Useful Banner Manager WordPress plugin through 1.6.1 does not perform CSRF checks on POST requests to its admin page, allowing an attacker to trick a logged in admin to add, modify or delete banners from the plugin by submitting a form.
problem types: CWE-352 Cross-Site Request Forgery (CSRF)
affected:
{
product: Useful Banner Manager
vendor: Unknown
versions:
lessThanOrEqual: 1.6.1, status: affected, version: 1.6.1, versionType: custom
}