PT-2023-12446 · Undefined · Undefined

Published 2023-06-22 · Updated 2023-07-11 · CVE-2021-4342

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned.

Description The issue concerns over 70 plugins and themes that are vulnerable to Cross-Site Request Forgery due to improperly implemented nonce protection that could be bypassed.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2021-4342

Affected Products

Undefined

References · 9

• 🔥 https://blog.nintechnet.com/multiple-wordpress-plugins-fixed-csrf-vulnerabilities-part-5 · Exploit
• 🔥 https://blog.nintechnet.com/multiple-wordpress-plugins-fixed-csrf-vulnerabilities-part-3 · Exploit
• 🔥 https://blog.nintechnet.com/multiple-wordpress-plugins-fixed-csrf-vulnerabilities-part-2 · Exploit
• 🔥 https://blog.nintechnet.com/multiple-wordpress-plugins-fixed-csrf-vulnerabilities-part-4 · Exploit
• 🔥 https://blog.nintechnet.com/more-wordpress-plugins-and-themes-vulnerable-to-csrf-attacks · Exploit
• 🔥 https://blog.nintechnet.com/25-wordpress-plugins-vulnerable-to-csrf-attacks · Exploit
• 🔥 https://blog.nintechnet.com/multiple-wordpress-plugins-fixed-csrf-vulnerabilities-part-1 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2021-4342 · Security Note
• https://t.me/cvenotify/52879 · Telegram Post