Lucene search
PRIOn knowledge basePRION:CVE-2021-25052HistoryJan 10, 2022 - 4:15 p.m.
Cross site request forgery (csrf)
2022-01-1016:15:00
PRIOn knowledge base
www.prio-n.com
8
The Button Generator WordPress plugin before 2.3.3 within the wow-company admin menu page allows to include() arbitrary file with PHP extension (as well as with data:// or http:// protocols), thus leading to CSRF RCE.
| CPE | Name | Operator | Version |
|---|---|---|---|
| button_generator | lt | 2.3.3 |
Related
wpvulndb
wpvulndb
Button Generator < 2.3.3 - RFI leading to RCE via CSRF
2021-12-05 00:00:00
wpexploit
wpexploit
Button Generator < 2.3.3 - RFI leading to RCE via CSRF
2021-12-05 00:00:00
cvelist
cvelist
CVE-2021-25052 Button Generator < 2.3.3 - RFI leading to RCE via CSRF
2022-01-10 15:30:36
patchstack
patchstack
cve
cve
CVE-2021-25052
2022-01-10 16:15:09
nuclei
nuclei
WordPress Button Generator <2.3.3 - Remote File Inclusion
2022-02-08 01:07:19
nvd
nvd
CVE-2021-25052
2022-01-10 16:15:09
cnvd
cnvd
WordPress Button Generator Plugin File Inclusion Vulnerability
2022-01-14 00:00:00