CVE-2021-25098 Easy Pricing Tables < 3.1.3 - Arbitrary Post Removal via CSRF

2022-03-0708:16:20

CWE-352

WPScan

www.cve.org

0.001 Low

EPSS

Percentile

26.4%

JSON

The Pricing Tables WordPress Plugin WordPress plugin before 3.1.3 does not verify the CSRF nonce when removing posts, allowing attackers to make a logged in admin remove arbitrary posts from the blog via a CSRF attack, which will be put in the trash

CNA Affected

[
  {
    "product": "Pricing Tables WordPress Plugin – Easy Pricing Tables",
    "vendor": "Unknown",
    "versions": [
      {
        "lessThan": "3.1.3",
        "status": "affected",
        "version": "3.1.3",
        "versionType": "custom"
      }
    ]
  }
]

References

wpscan.com/vulnerability/960a634d-a88a-4d90-9ac3-7d24b1fe07fe

0.001 Low

EPSS

Percentile

26.4%

JSON

Related for CVELIST:CVE-2021-25098