Lucene search
Apple502jWPVDB-ID:519205FF-2FF6-41E4-9E95-475AB2CE35B9HistoryOct 25, 2021 - 12:00 a.m.
MAZ Loader < 1.4.1 - Arbitrary Loader Deletion via CSRF
2021-10-2500:00:00
apple502j
wpscan.com
7
maz loader
arbitrary deletion
csrf
nonce bypass
vendor notification
fix absence
EPSS
0.001
Percentile
27.6%
The plugin does not enforce nonce checks, which allows attackers to make administrators delete arbitrary loaders via a CSRF attack The vendor has been notified on August 24th, 2021, as well as escalated to the WP plugins team 3 times, no fix was made despite two new versions being released.
PoC
https://example.com/wp-admin/admin.php?page=maz-loader-list&action;=delete&id;=1
Related
cvelist
cvelist
CVE-2021-24668 MAZ Loader < 1.4.1 - Arbitrary Loader Deletion via CSRF
2021-11-23 19:16:05
nvd
nvd
CVE-2021-24668
2021-11-23 20:15:09
cve
cve
CVE-2021-24668
2021-11-23 20:15:09
prion
prion
Cross site request forgery (csrf)
2021-11-23 20:15:00
patchstack
patchstack
wpexploit
wpexploit
MAZ Loader < 1.4.1 - Arbitrary Loader Deletion via CSRF
2021-10-25 00:00:00