Lucene search
PRIOn knowledge basePRION:CVE-2021-24799HistoryNov 01, 2021 - 9:15 a.m.
Cross site request forgery (csrf)
2021-11-0109:15:00
PRIOn knowledge base
www.prio-n.com
2
The Far Future Expiry Header WordPress plugin before 1.5 does not have CSRF check when saving its settings, which could allow attackers to make a logged in admin change them via a CSRF attack.
| CPE | Name | Operator | Version |
|---|---|---|---|
| far_future_expiry_header | lt | 1.5 |
Related
cvelist
cvelist
nvd
nvd
CVE-2021-24799
2021-11-01 09:15:09
wpvulndb
wpvulndb
Far Future Expiry Header < 1.5 - Plugin's Settings Update via CSRF
2021-10-04 00:00:00
cve
cve
CVE-2021-24799
2021-11-01 09:15:09
patchstack
patchstack
cnvd
cnvd
wpexploit
wpexploit
Far Future Expiry Header < 1.5 - Plugin's Settings Update via CSRF
2021-10-04 00:00:00