CVE-2021-38342

2021-08-3019:15:09

Google

osv.dev

6.9 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

21.6%

JSON

The Nested Pages WordPress plugin <= 3.1.15 was vulnerable to Cross-Site Request Forgery via the npBulkActions and npBulkEdit admin_post actions, which allowed attackers to trash or permanently purge arbitrary posts as well as changing their status, reassigning their ownership, and editing other metadata.

CPENameOperatorVersion
wp-nested-pageseq1.3.13
wp-nested-pageseq1.6.4
wp-nested-pageseq3.0.11
wp-nested-pageseq3.0.8
wp-nested-pageseq1.6.5
wp-nested-pageseq3.1.8
wp-nested-pageseq3.1.10
wp-nested-pageseq3.1.12
wp-nested-pageseq3.1.4
wp-nested-pageseq1.5.4

Name	Operator	Version
wp-nested-pages	eq	1.3.13
wp-nested-pages	eq	1.6.4
wp-nested-pages	eq	3.0.11
wp-nested-pages	eq	3.0.8
wp-nested-pages	eq	1.6.5
wp-nested-pages	eq	3.1.8
wp-nested-pages	eq	3.1.10
wp-nested-pages	eq	3.1.12
wp-nested-pages	eq	3.1.4
wp-nested-pages	eq	1.5.4