Lucene search
WPScanCVELIST:CVE-2021-24784HistoryDec 13, 2021 - 10:40 a.m.
CVE-2021-24784 WP Admin Logo Changer <= 1.0 - Plugin's Settings Update via CSRF
2021-12-1310:40:52
CWE-352
WPScan
raw.githubusercontent.com
1
The WP Admin Logo Changer WordPress plugin through 1.0 does not have CSRF check when saving its settings, which could allow attackers to make a logged in admin update them via a CSRF attack.
Related
wpexploit
wpexploit
WP Admin Logo Changer <= 1.0 - Plugin's Settings Update via CSRF
2021-11-15 00:00:00
cve
cve
CVE-2021-24784
2021-12-13 11:15:00
prion
prion
Cross site request forgery (csrf)
2021-12-13 11:15:00
patchstack
patchstack
wpvulndb
wpvulndb
WP Admin Logo Changer <= 1.0 - Plugin's Settings Update via CSRF
2021-11-15 00:00:00
cnvd
cnvd