Lucene search
+L

2 matches found

Mend
Mend
•added 2021/11/01 9:01 p.m.•4 views

CVE-2021-39333

The Hashthemes Demo Importer Plugin = 1.1.1 for WordPress contained several AJAX functions which relied on a nonce which was visible to all logged-in users for access control, allowing them to execute a function that truncated nearly all database tables and removed the contents of...

8.1CVSS0.0105EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/11/01 12:00 a.m.•4 views

CVE-2021-39333: Improper Access Control

The Hashthemes Demo Importer Plugin = 1.1.1 for WordPress contained several AJAX functions which relied on a nonce which was visible to all logged-in users for access control, allowing them to execute a function that truncated nearly all database tables and removed the contents of...

8.1CVSS6.1AI score0.0105EPSS
SaveExploits1References2
Rows per page
Query Builder