Lucene search
Apple502jPATCHSTACK:2BA74F58C52EA367DA284A3EB97881F1HistoryOct 18, 2021 - 12:00 a.m.
WordPress Simple JWT Login plugin <= 3.2.0 - Cross-Site Request Forgery (CSRF) vulnerability leading to Arbitrary Settings Update / Site Takeover
2021-10-1800:00:00
apple502j
patchstack.com
6
0.001 Low
EPSS
Percentile
44.2%
Cross-Site Request Forgery (CSRF) vulnerability leading to Arbitrary Settings Update / Site Takeover discovered by apple502j in WordPress Simple JWT Login plugin (versions <= 3.2.0).
Solution
Update the WordPress Simple JWT Login plugin to the latest available version (at least 3.2.1).
| CPE | Name | Operator | Version |
|---|---|---|---|
| simple jwt login | le | 3.2.0 |
Related
wpvulndb
wpvulndb
nvd
nvd
CVE-2021-24804
2021-11-17 11:15:07
cve
cve
CVE-2021-24804
2021-11-17 11:15:07
cnvd
cnvd
WordPress Simple JWT Login plugin access control error vulnerability
2021-11-21 00:00:00
cvelist
cvelist
prion
prion
Default credentials
2021-11-17 11:15:00
wpexploit
wpexploit