Lucene search
Quentin VILLAIN (3wsec)PATCHSTACK:7DACFA69F9B2D91FC220317B9AE5F20FHistoryOct 05, 2021 - 12:00 a.m.
WordPress Batch Cat plugin <= 0.3 - Arbitrary Categories Add/Set/Delete to Posts vulnerability
2021-10-0500:00:00
Quentin VILLAIN (3wsec)
patchstack.com
9
wordpress
batch cat plugin
vulnerability
quentin villain
EPSS
0.001
Percentile
24.8%
Arbitrary Categories Add/Set/Delete to Posts vulnerability discovered by Quentin VILLAIN (3wsec) in WordPress Batch Cat plugin (versions <= 0.3).
Solution
Deactivate and delete. This plugin has been closed as of September 24, 2021 and is not available for download. This closure is temporary, pending a full review.
Related
nvd
nvd
CVE-2021-24788
2021-11-08 18:15:09
wpvulndb
wpvulndb
Batch Cat <= 0.3 - Subscriber+ Arbitrary Categories Add/Set/Delete to Posts
2021-10-05 00:00:00
wpexploit
wpexploit
Batch Cat <= 0.3 - Subscriber+ Arbitrary Categories Add/Set/Delete to Posts
2021-10-05 00:00:00
cnvd
cnvd
WordPress Plugin Access Control Error Vulnerability (CNVD-2021-101471)
2021-11-10 00:00:00
cve
cve
CVE-2021-24788
2021-11-08 18:15:09
cvelist
cvelist
prion
prion
Authentication flaw
2021-11-08 18:15:00