Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2021-24853
HistoryNov 17, 2021 - 11:15 a.m.

CVE-2021-24853

2021-11-1711:15:08
CWE-284
CWE-352
[email protected]
web.nvd.nist.gov
3
wordpress
csrf
qr redirector

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

CVSS3

4.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

EPSS

0.001

Percentile

36.7%

JSON

The QR Redirector WordPress plugin before 1.6 does not have capability and CSRF checks when saving bulk QR Redirector settings via the qr_save_bulk AJAX action, which could allow any authenticated user, such as subscriber to change the redirect response status code of arbitrary QR Redirects

Affected configurations

Nvd
Node
qr_redirector_projectqr_redirectorRange<1.6wordpress
VendorProductVersionCPE
qr_redirector_projectqr_redirector*cpe:2.3:a:qr_redirector_project:qr_redirector:*:*:*:*:*:wordpress:*:*

Related

cnvd 1
wpvulndb 1
cvelist 1
cve 1
patchstack 1
prion 1
wpexploit 1
cnvd
cnvd
WordPress Cross-site Request Forgery Vulnerability (CNVD-2021-91416)
2021-11-22 00:00:00
wpvulndb
wpvulndb
QR Redirector < 1.6 - Subscriber+ Arbitrary QR Redirect Response Status Update
2021-10-18 00:00:00
cvelist
cvelist
CVE-2021-24853 QR Redirector < 1.6 - Subscriber+ Arbitrary QR Redirect Response Status Update
2021-11-17 10:15:57
cve
cve
CVE-2021-24853
2021-11-17 11:15:08
patchstack
patchstack
WordPress QR Redirector plugin <= 1.5 - Arbitrary QR Redirect Response Status Update vulnerability
2021-10-18 00:00:00
prion
prion
Cross site request forgery (csrf)
2021-11-17 11:15:00
wpexploit
wpexploit
QR Redirector < 1.6 - Subscriber+ Arbitrary QR Redirect Response Status Update
2021-10-18 00:00:00

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

CVSS3

4.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

EPSS

0.001

Percentile

36.7%

JSON
Related for NVD:CVE-2021-24853
cnvd1wpvulndb1cvelist1cve1patchstack1prion1wpexploit1