Lucene search
PRIOn knowledge basePRION:CVE-2021-25013HistoryJan 24, 2022 - 8:15 a.m.
Cross site request forgery (csrf)
2022-01-2408:15:00
PRIOn knowledge base
www.prio-n.com
1
0.001 Low
EPSS
Percentile
21.3%
The Qubely WordPress plugin before 1.7.8 does not have authorisation and CSRF check on the qubely_delete_saved_block AJAX action, and does not ensure that the block to be deleted belong to the plugin, as a result, any authenticated users, such as subscriber can delete arbitrary posts
Related
cnvd
cnvd
WordPress Qubely plugin cross-site request forgery vulnerability
2022-01-26 00:00:00
cvelist
cvelist
CVE-2021-25013 Qubely < 1.7.8 - Subscriber+ Arbitrary Post Deletion
2022-01-24 08:01:08
wpexploit
wpexploit
Qubely < 1.7.8 - Subscriber+ Arbitrary Post Deletion
2021-12-27 00:00:00
patchstack
patchstack
nvd
nvd
CVE-2021-25013
2022-01-24 08:15:09
wpvulndb
wpvulndb
Qubely < 1.7.8 - Subscriber+ Arbitrary Post Deletion
2021-12-27 00:00:00
cve
cve
CVE-2021-25013
2022-01-24 08:15:09