title: WP Custom Cursors < 3.0.1 - Arbitrary Cursor Deletion via CSRF
description: The WP Custom Cursors WordPress plugin before 3.0.1 does not have CSRF check in place when deleting cursors, which could allow attackers to made a logged in admin delete arbitrary cursors via a CSRF attack.
problem types: CWE-352 Cross-Site Request Forgery (CSRF)
affected:
{
vendor: Unknown
product: WP Custom Cursors
versions:
version: 3.0.1, status: affected, lessThan: 3.0.1, versionType: custom
}