Lucene search

K
prionPRIOn knowledge basePRION:CVE-2021-38342
HistoryAug 30, 2021 - 7:15 p.m.

Cross site request forgery (csrf)

2021-08-3019:15:00
PRIOn knowledge base
www.prio-n.com

8 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

21.6%

The Nested Pages WordPress plugin <= 3.1.15 was vulnerable to Cross-Site Request Forgery via the npBulkActions and npBulkEdit admin_post actions, which allowed attackers to trash or permanently purge arbitrary posts as well as changing their status, reassigning their ownership, and editing other metadata.

CPENameOperatorVersion
nested_pagesle3.1.15

8 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

21.6%