Vulners
Lucene search
CVE-2021-24981
๐๏ธย 21 Dec 2021ย 08:45:40Reported byย WPScanTypeย 
ย cve๐ย web.nvd.nist.gov๐ย 56ย Views๐ WEB
| Reporter | Title | Published | Views | Family All 12 |
|---|---|---|---|---|
 | CVE-2021-24981 | 21 Dec 202112:22 | โ | circl |
 | WordPress ๆไปถไปฃ็ ้ฎ้ขๆผๆด | 21 Dec 202100:00 | โ | cnnvd |
 | WordPress Directorist plugin cross-site request forgery vulnerability | 26 Dec 202100:00 | โ | cnvd |
 | CVE-2021-24981 Directorist โ Business Directory Plugin < 7.0.6.2 - CSRF to Remote File Upload | 21 Dec 202108:45 | โ | cvelist |
 | EUVD-2021-11893 | 7 Oct 202500:30 | โ | euvd |
 | CVE-2021-24981 | 21 Dec 202109:15 | โ | nvd |
 | WordPress Directorist plugin <= 7.0.6.1 - Cross-Site Request Forgery (CSRF) vulnerability leading to Remote File Upload | 18 Nov 202100:00 | โ | patchstack |
 | Cross site request forgery (csrf) | 21 Dec 202109:15 | โ | prion |
 | CVE-2021-24981 | 22 May 202518:25 | โ | redhatcve |
 | VulnCheck KEV: CVE-2021-24981 | 16 Nov 202100:00 | โ | vulncheck_kev |
10
Node
[
{
"product": "Directorist โ Business Directory Plugin",
"vendor": "Unknown",
"versions": [
{
"lessThan": "7.0.6.2",
"status": "affected",
"version": "7.0.6.2",
"versionType": "custom"
}
]
}
]| Parameter | Position | Path | Description | CWE |
|---|---|---|---|---|
| action | request body | wp-admin/admin-ajax.php | CSRF to remote file upload enabling arbitrary PHP shell upload via plugin endpoint | CWE-352,ย CWE-434 |
| download_item[download_link] | request body | wp-admin/admin-ajax.php | CSRF to remote file upload enabling arbitrary PHP shell upload via plugin endpoint | CWE-352,ย CWE-434 |
| download_item[skip_licencing] | request body | wp-admin/admin-ajax.php | CSRF to remote file upload enabling arbitrary PHP shell upload via plugin endpoint | CWE-352,ย CWE-434 |
| download_item[permalink] | request body | wp-admin/admin-ajax.php | CSRF to remote file upload enabling arbitrary PHP shell upload via plugin endpoint | CWE-352,ย CWE-434 |
| type | request body | wp-admin/admin-ajax.php | CSRF to remote file upload enabling arbitrary PHP shell upload via plugin endpoint | CWE-352,ย CWE-434 |
Data
Build on a solid foundation withย Vulners data
Weย provide theย essential building blocks forย cybersecurity solutions withย comprehensive, structured, andย constantly updated vulnerability andย exploits data
Api
Power your application withย Vulners API
The Vulners REST API offers reliable, high-performance access toย vulnerabilityย intelligence, withย 99.9%ย SLAย uptime andย CDN-backed data delivery forย seamlessย global access
App
Assess and manage vulnerabilities withย Vulnersย tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
21 Nov 2024 05:54Current
7.6High risk
Vulners AI Score7.6
CVSS 25.1
CVSS 3.17.5
EPSS0.00244