Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2021-34661
HistoryAug 09, 2021 - 1:15 p.m.

CVE-2021-34661

2021-08-0913:15:07
CWE-352
[email protected]
web.nvd.nist.gov
3
wp fusion lite
wordpress
cross-site request forgery
log deletion

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

CVSS3

4.7

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N

EPSS

0.001

Percentile

21.6%

JSON

The WP Fusion Lite WordPress plugin is vulnerable to Cross-Site Request Forgery via the show_logs_section function found in the ~/includes/admin/logging/class-log-handler.php file which allows attackers to drop all logs for the plugin, in versions up to and including 3.37.18.

Affected configurations

Nvd
Node
verygoodpluginswp_fusionRange≤3.37.18litewordpress
VendorProductVersionCPE
verygoodpluginswp_fusion*cpe:2.3:a:verygoodplugins:wp_fusion:*:*:*:*:lite:wordpress:*:*

Related

cvelist 1
wpvulndb 1
prion 1
cve 1
patchstack 1
cvelist
cvelist
CVE-2021-34661 WP Fusion Lite <= 3.37.18 Cross-Site Request Forgery to Data Deletion
2021-08-09 12:23:20
wpvulndb
wpvulndb
WP Fusion Lite < 3.37.30 - CSRF to Data Deletion
2021-08-06 00:00:00
prion
prion
Cross site request forgery (csrf)
2021-08-09 13:15:00
cve
cve
CVE-2021-34661
2021-08-09 13:15:07
patchstack
patchstack
WordPress WP Fusion Lite plugin <= 3.37.18 - Cross-Site Request Forgery (CSRF) vulnerability leading to Data Deletion
2021-08-06 00:00:00

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

CVSS3

4.7

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N

EPSS

0.001

Percentile

21.6%

JSON
Related for NVD:CVE-2021-34661
cvelist1wpvulndb1prion1cve1patchstack1