Lucene search
PRIOn knowledge basePRION:CVE-2021-39333HistoryNov 01, 2021 - 9:15 p.m.
Hardcoded credentials
2021-11-0121:15:00
PRIOn knowledge base
www.prio-n.com
1
The Hashthemes Demo Importer Plugin <= 1.1.1 for WordPress contained several AJAX functions which relied on a nonce which was visible to all logged-in users for access control, allowing them to execute a function that truncated nearly all database tables and removed the contents of wp-content/uploads.
| CPE | Name | Operator | Version |
|---|---|---|---|
| hashthemes_demo_importer | le | 1.1.1 |
Related
wordfence
wordfence
Site Deletion Vulnerability in Hashthemes Plugin
2021-10-26 14:08:54
wpvulndb
wpvulndb
HashThemes Demo Importer < 1.1.2 - Improper Access Control to Blog Reset
2021-10-26 00:00:00
cvelist
cvelist
cve
cve
CVE-2021-39333
2021-11-01 21:15:07
cnvd
cnvd
WordPress Access Control Error Vulnerability
2021-11-04 00:00:00
nvd
nvd
CVE-2021-39333
2021-11-01 21:15:07