CVE-2021-24711 Software License Manager < 4.5.1 - Arbitrary Domain Deletion via CSRF

2021-10-1110:45:45

CWE-352

WPScan

www.cve.org

software license manager

4.5.1

arbitrary domain deletion

csrf

wordpress plugin

AI Score

8.9

Confidence

High

EPSS

0.001

Percentile

51.2%

JSON

The del_reistered_domains AJAX action of the Software License Manager WordPress plugin before 4.5.1 does not have any CSRF checks, and is vulnerable to a CSRF attack

CNA Affected

[
  {
    "product": "Software License Manager",
    "vendor": "Unknown",
    "versions": [
      {
        "lessThan": "4.5.1",
        "status": "affected",
        "version": "4.5.1",
        "versionType": "custom"
      }
    ]
  }
]