Lucene search
PRIOn knowledge basePRION:CVE-2021-24803HistoryFeb 28, 2022 - 9:15 a.m.
Cross site request forgery (csrf)
2022-02-2809:15:00
PRIOn knowledge base
www.prio-n.com
3
The Core Tweaks WP Setup WordPress plugin through 4.1 allows to bulk-set many settings in WordPress, including the admin email, as well as creating a new admin account. There is no CSRF protection in place, allowing an attacker to arbitrary change the admin email or create another admin account and takeover the website via CSRF attacks
| CPE | Name | Operator | Version |
|---|---|---|---|
| core_tweaks_wp_setup | le | 4.1 |
Related
patchstack
patchstack
wpexploit
wpexploit
wpvulndb
wpvulndb
cvelist
cvelist
cnvd
cnvd
cve
cve
CVE-2021-24803
2022-02-28 09:15:07
nvd
nvd
CVE-2021-24803
2022-02-28 09:15:07