CVE-2021-4421 Advanced Popups <= 1.1.1 - Cross-Site Request Forgery Bypass

🗓️ 12 Jul 2023 06:52:34Reported by WordfenceType

Vulnerability in Advanced Popups WordPress plugin, allows unauthenticated attackers to perform CSRF attack to save meta tags with forged request

Reporter	Title	Published	Views	Family All 10
Circl	CVE-2021-4421	12 Jul 202312:35	–	circl
CNNVD	WordPress Plugin Advanced Popups 跨站请求伪造漏洞	12 Jul 202300:00	–	cnnvd
CVE	CVE-2021-4421	12 Jul 202306:52	–	cve
EUVD	EUVD-2021-34248	3 Oct 202520:07	–	euvd
NVD	CVE-2021-4421	12 Jul 202307:15	–	nvd
OSV	CVE-2021-4421	12 Jul 202307:15	–	osv
Prion	Cross site request forgery (csrf)	12 Jul 202307:15	–	prion
Positive Technologies	PT-2023-12535 · WordPress · Advanced Popups	12 Jul 202300:00	–	ptsecurity
RedhatCVE	CVE-2021-4421	22 May 202520:49	–	redhatcve
Vulnrichment	CVE-2021-4421 Advanced Popups <= 1.1.1 - Cross-Site Request Forgery Bypass	12 Jul 202306:52	–	vulnrichment

[
  {
    "vendor": "codesupplyco",
    "product": "Advanced Popups",
    "versions": [
      {
        "version": "0",
        "status": "affected",
        "lessThanOrEqual": "1.1.1",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

Source	Link
blog	www.blog.nintechnet.com/multiple-wordpress-plugins-fixed-csrf-vulnerabilities-part-4/
blog	www.blog.nintechnet.com/multiple-wordpress-plugins-fixed-csrf-vulnerabilities-part-1/
blog	www.blog.nintechnet.com/more-wordpress-plugins-and-themes-vulnerable-to-csrf-attacks/
blog	www.blog.nintechnet.com/multiple-wordpress-plugins-fixed-csrf-vulnerabilities-part-5/
plugins	www.plugins.trac.wordpress.org/changeset
blog	www.blog.nintechnet.com/multiple-wordpress-plugins-fixed-csrf-vulnerabilities-part-2/
wordfence	www.wordfence.com/threat-intel/vulnerabilities/id/dc7b51e5-6eb7-41ba-add3-f083fb34c5e1
blog	www.blog.nintechnet.com/25-wordpress-plugins-vulnerable-to-csrf-attacks/
blog	www.blog.nintechnet.com/multiple-wordpress-plugins-fixed-csrf-vulnerabilities-part-3/

08 Apr 2026 17:27Current

4.6Medium risk

Vulners AI Score4.6

CVSS 3.14.3

EPSS0.00393

CWE-352