Lucene search

[email protected]CVE-2021-25098

HistoryMar 07, 2022 - 9:15 a.m.

CVE-2021-25098

2022-03-0709:15:08

CWE-352

[email protected]

web.nvd.nist.gov

cve-2021-25098

wordpress

plugin

security

csrf

nvd

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

4.3 Medium

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.001 Low

EPSS

Percentile

26.3%

JSON

The Pricing Tables WordPress Plugin WordPress plugin before 3.1.3 does not verify the CSRF nonce when removing posts, allowing attackers to make a logged in admin remove arbitrary posts from the blog via a CSRF attack, which will be put in the trash

Affected configurations

Vulners

NVD

Node

fatcatappseasy_pricing_tablesRange<3.1.3

VendorProductVersionCPE
fatcatappseasy_pricing_tables*cpe:2.3:a:fatcatapps:easy_pricing_tables:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
fatcatapps	easy_pricing_tables	*	cpe:2.3:a:fatcatapps:easy_pricing_tables::::::::

CNA Affected

[
  {
    "product": "Pricing Tables WordPress Plugin – Easy Pricing Tables",
    "vendor": "Unknown",
    "versions": [
      {
        "lessThan": "3.1.3",
        "status": "affected",
        "version": "3.1.3",
        "versionType": "custom"
      }
    ]
  }
]