Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2021-102389
HistoryDec 24, 2021 - 12:00 a.m.

WordPress Cross-site Request Forgery Vulnerability (CNVD-2021-102389)

2021-12-2400:00:00
China National Vulnerability Database
www.cnvd.org.cn
6
wordpress
cross-site request forgery
cfdb7

EPSS

0.001

Percentile

41.3%

WordPress is a set of blogging platforms developed using the PHP language by the WordPress (Wordpress) Foundation. The WordPress plugin Contact Form 7 Database Addon (CFDB7) 1.2.5.9 and earlier versions are vulnerable to cross-site request forgery, which stems from the lack of token validation for cross-site request forgery in the plugin. No detailed vulnerability details are available.

EPSS

0.001

Percentile

41.3%