Lucene search
Francesco CarlucciPATCHSTACK:2CBEA07A290DB3F545914987826AF75DHistoryOct 21, 2021 - 12:00 a.m.
WordPress Core Tweaks WP Setup plugin <= 4.1 - Arbitrary Admin Account Creation / Admin Email Update via Cross-Site Request Forgery (CSRF) vulnerability
2021-10-2100:00:00
Francesco Carlucci
patchstack.com
10
0.001 Low
EPSS
Percentile
43.4%
Arbitrary Admin Account Creation / Admin Email Update via Cross-Site Request Forgery (CSRF) vulnerability discovered by Francesco Carlucci in WordPress Core Tweaks WP Setup plugin (versions <= 4.1).
Solution
Deactivate and delete. This plugin has been closed as of October 7, 2021 and is not available for download. Reason: Security Issue.
| CPE | Name | Operator | Version |
|---|---|---|---|
| core tweaks wp setup | le | 4.1 |
Related
cvelist
cvelist
cnvd
cnvd
wpexploit
wpexploit
wpvulndb
wpvulndb
cve
cve
CVE-2021-24803
2022-02-28 09:15:07
prion
prion
Cross site request forgery (csrf)
2022-02-28 09:15:00
nvd
nvd
CVE-2021-24803
2022-02-28 09:15:07