CVE-2021-4386

🗓️ 01 Jul 2023 04:15:10Reported by [email protected]Type

nvd

nvd🔗 web.nvd.nist.gov👁 19 Views

WP Security Question plugin vulnerability for WordPress, version 1.0.

Reporter	Title	Published	Views	Family All 10
Circl	CVE-2021-4386	1 Jul 202307:16	–	circl
CNNVD	WordPress Plugin WP Security Question 跨站请求伪造漏洞	1 Jul 202300:00	–	cnnvd
CVE	CVE-2021-4386	1 Jul 202303:30	–	cve
Cvelist	CVE-2021-4386 WP Security Question <= 1.0.5 - Cross-Site Request Forgery Bypass	1 Jul 202303:30	–	cvelist
EUVD	EUVD-2021-34213	3 Oct 202520:07	–	euvd
OSV	CVE-2021-4386	1 Jul 202304:15	–	osv
Prion	Cross site request forgery (csrf)	1 Jul 202304:15	–	prion
Positive Technologies	PT-2023-12498 · WordPress · Wp Security Question	1 Jul 202300:00	–	ptsecurity
RedhatCVE	CVE-2021-4386	6 Feb 202504:21	–	redhatcve
Vulnrichment	CVE-2021-4386 WP Security Question <= 1.0.5 - Cross-Site Request Forgery Bypass	1 Jul 202303:30	–	vulnrichment

NVD

Node

flippercode wp-security-questionsRange≤1.0.5wordpress

Source	Link
blog	www.blog.nintechnet.com/multiple-wordpress-plugins-fixed-csrf-vulnerabilities-part-3/
blog	www.blog.nintechnet.com/multiple-wordpress-plugins-fixed-csrf-vulnerabilities-part-5/
blog	www.blog.nintechnet.com/multiple-wordpress-plugins-fixed-csrf-vulnerabilities-part-2/
blog	www.blog.nintechnet.com/multiple-wordpress-plugins-fixed-csrf-vulnerabilities-part-1/
blog	www.blog.nintechnet.com/multiple-wordpress-plugins-fixed-csrf-vulnerabilities-part-4/
wordfence	www.wordfence.com/threat-intel/vulnerabilities/id/23f9d758-4b5e-44e5-9f58-a37b01c4ffdb
blog	www.blog.nintechnet.com/25-wordpress-plugins-vulnerable-to-csrf-attacks/
blog	www.blog.nintechnet.com/more-wordpress-plugins-and-themes-vulnerable-to-csrf-attacks/
plugins	www.plugins.trac.wordpress.org/browser/wp-security-questions/trunk/modules/settings/model.settings.php

17 Jun 2026 04:19Current

8.4High risk

Vulners AI Score8.4

CVSS 3.14.3

EPSS0.00388

wordpress cross-site request forgery missing nonce validation unauthenticated attackers plugin settings