Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
prionPRIOn knowledge basePRION:CVE-2021-24328
HistoryJun 01, 2021 - 2:15 p.m.

Cross site request forgery (csrf)

2021-06-0114:15:00
PRIOn knowledge base
www.prio-n.com
1

0.002 Low

EPSS

Percentile

64.6%

JSON

The WP Login Security and History WordPress plugin through 1.0 did not have CSRF check when saving its settings, not any sanitisation or validation on them. This could allow attackers to make logged in administrators change the plugin’s settings to arbitrary values, and set XSS payloads on them as well

CPENameOperatorVersion
wp_login_security_and_historyle1.0

Related

nvd 1
wpvulndb 1
cvelist 1
wpexploit 1
cve 1
nvd
nvd
CVE-2021-24328
2021-06-01 14:15:09
wpvulndb
wpvulndb
WP Login Security and History <= 1.0 - CSRF to Stored Cross-Site Scripting (XSS)
2021-04-12 00:00:00
cvelist
cvelist
CVE-2021-24328 WP Login Security and History <= 1.0 - CSRF to Stored Cross-Site Scripting (XSS)
2021-06-01 11:33:31
wpexploit
wpexploit
WP Login Security and History <= 1.0 - CSRF to Stored Cross-Site Scripting (XSS)
2021-04-12 00:00:00
cve
cve
CVE-2021-24328
2021-06-01 14:15:09

0.002 Low

EPSS

Percentile

64.6%

JSON
Related for PRION:CVE-2021-24328
nvd1wpvulndb1cvelist1wpexploit1cve1