PT-2023-12446 · Undefined · Undefined

CVE-2021-4342 · Publicado 2023-06-22 · Atualizado 2023-07-11

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned.

Description The issue concerns over 70 plugins and themes that are vulnerable to Cross-Site Request Forgery due to improperly implemented nonce protection that could be bypassed.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Identificadores relacionados

CVE-2021-4342

Produtos afetados

Undefined

Referências · 9

• 🔥 https://blog.nintechnet.com/multiple-wordpress-plugins-fixed-csrf-vulnerabilities-part-5 · Exploit
• 🔥 https://blog.nintechnet.com/multiple-wordpress-plugins-fixed-csrf-vulnerabilities-part-3 · Exploit
• 🔥 https://blog.nintechnet.com/multiple-wordpress-plugins-fixed-csrf-vulnerabilities-part-2 · Exploit
• 🔥 https://blog.nintechnet.com/multiple-wordpress-plugins-fixed-csrf-vulnerabilities-part-4 · Exploit
• 🔥 https://blog.nintechnet.com/more-wordpress-plugins-and-themes-vulnerable-to-csrf-attacks · Exploit
• 🔥 https://blog.nintechnet.com/25-wordpress-plugins-vulnerable-to-csrf-attacks · Exploit
• 🔥 https://blog.nintechnet.com/multiple-wordpress-plugins-fixed-csrf-vulnerabilities-part-1 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2021-4342 · Nota de Segurança
• https://t.me/cvenotify/52879 · Publicação no Telegram