CVE-2021-24799

creationtimestamp| type| source ---|---|--- 2021-11-01 11:20:57+00:00| seen| https://t.me/cibsecurity/31521...

CVE-2021-24799

The CVE-2021-24799 entry concerns the WordPress plugin Far Future Expiry Header (versions

CVE-2021-24799 Far Future Expiry Header < 1.5 - Plugin's Settings Update via CSRF

The Far Future Expiry Header WordPress plugin before 1.5 does not have CSRF check when saving its settings, which could allow attackers to make a logged in admin change them via a CSRF attack...