title: Easy Pricing Tables < 3.1.3 - Arbitrary Post Removal via CSRF
description: The Pricing Tables WordPress Plugin WordPress plugin before 3.1.3 does not verify the CSRF nonce when removing posts, allowing attackers to make a logged in admin remove arbitrary posts from the blog via a CSRF attack, which will be put in the trash
problem types: CWE-352 Cross-Site Request Forgery (CSRF)
affected:
{
product: Pricing Tables WordPress Plugin – Easy Pricing Tables
vendor: Unknown
versions:
lessThan: 3.1.3, status: affected, version: 3.1.3, versionType: custom
}