CVE-2016-20083

EIP tracks 1 public exploit for CVE-2016-20083. PoCs published by Aatif Shahdad.

AI-analyzed exploit summary This exploit demonstrates a CSRF vulnerability in the WordPress More Fields Plugin 2.1, allowing an attacker to add or delete boxes via crafted HTML forms without CSRF token validation.

WordPress More Fields Plugin 2.1 contains a cross-site request forgery vulnerability that allows attackers to perform unauthorized actions by disabling CSRF token validation. Attackers can craft malicious web pages that trick logged-in administrators into adding or deleting custom fields and boxes on the Write/Edit page via POST and GET requests to the options-general.php endpoint.