Lucene search

CVE-2021-20652

🗓️ 05 Feb 2021 14:17:15Reported by jpcertType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 35 Views

Cross-site request forgery (CSRF) vulnerability in Name Directory 1.17.4 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors

5 of 5AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Reporter	Title	Published	Views	Family All 6
NVD	CVE-2021-20652	5 Feb 202114:15	–	nvd
Japan Vulnerability Notes	JVN#50470170: WordPress Plugin "Name Directory" vulnerable to cross-site request forgery	5 Feb 202100:00	–	jvn
Prion	Cross site request forgery (csrf)	5 Feb 202114:15	–	prion
Cvelist	CVE-2021-20652	5 Feb 202109:35	–	cvelist
CNVD	Wordpress name-directory cross-site request forgery vulnerability	8 Feb 202100:00	–	cnvd
Patchstack	WordPress Name Directory plugin <= 1.17.4 - Cross-Site Request Forgery (CSRF) vulnerability	10 Jan 202100:00	–	patchstack

Nvd

Vulners

Node

name_directory_project name_directoryRange≤1.17.4wordpress

[
  {
    "product": "Name Directory",
    "vendor": "J. Peters",
    "versions": [
      {
        "status": "affected",
        "version": "1.17.4 and earlier"
      }
    ]
  }
]

Source	Link
jvn	www.jvn.jp/en/jp/JVN50470170/index.html
wordpress	www.wordpress.org/plugins/name-directory/

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

05 Feb 2021 14:15Current

8.8High risk

Vulners AI Score8.8

CVSS26.8

CVSS38.8

EPSS0.00094

CWE-352