Lucene search
PRIOn knowledge basePRION:CVE-2021-4374HistoryJun 07, 2023 - 2:15 a.m.
Authorization
2023-06-0702:15:00
PRIOn knowledge base
www.prio-n.com
1
wordpress
automatic plugin
vulnerability
options update
authorization
validation
unauthenticated attackers
compromise
The WordPress Automatic Plugin for WordPress is vulnerable to arbitrary options updates in versions up to, and including, 3.53.2. This is due to missing authorization and option validation in the process_form.php file. This makes it possible for unauthenticated attackers to arbitrarily update the settings of a vulnerable site and ultimately compromise the entire site.
| CPE | Name | Operator | Version |
|---|---|---|---|
| wordpress_automatic_plugin | le | 3.53.2 |
Related
cve
cve
CVE-2021-4374
2023-06-07 02:15:15
nvd
nvd
CVE-2021-4374
2023-06-07 02:15:15
cvelist
cvelist
CVE-2021-4374
2023-06-07 01:51:44