PT-2022-9550 · WordPress · Accept Donations With Paypal

Krzysztof Zając · Published 2022-01-24 · Updated 2022-01-28 · CVE-2021-24989

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Accept Donations with PayPal WordPress plugin versions prior to 1.3.4

Description The issue allows attackers to make a logged-in admin delete arbitrary posts from the blog due to the lack of a CSRF check and insufficient validation of the post to be deleted.

Recommendations For versions prior to 1.3.4, update to version 1.3.4 or later to resolve the issue.

Exploit

Fix

CSRF

Weakness Enumeration

CWE-352

Related Identifiers

CVE-2021-24989

Affected Products

Accept Donations With Paypal

References · 3

• 🔥 https://wpscan.com/vulnerability/82c2ead1-1d3c-442a-ae68-359a4748447f · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2021-24989 · Security Note
• https://osv.dev/vulnerability/CVE-2021-24989 · Vendor Advisory