Lucene search
+L

9 matches found

RedhatCVE
RedhatCVE
•added 2025/05/22 7:23 p.m.•10 views

CVE-2021-24852

The MouseWheel Smooth Scroll WordPress plugin before 5.7 does not have CSRF check in place on its settings page, which could allow attackers to make a logged in admin change them via a CSRF attack...

6.5CVSS6.5AI score0.00549EPSS
SaveExploits2References1
CNVD
CNVD
•added 2021/11/21 12:00 a.m.•30 views

WordPress MouseWheel Smooth Scroll plugin cross-site request forgery vulnerability

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A cross-site request forgery vulnerability exists in the WordPress MouseWheel Smooth Scroll plugin in versions...

6.5CVSS6.3AI score0.00549EPSS
SaveExploits2References1
OSV
OSV
•added 2021/11/17 11:15 a.m.•16 views

CVE-2021-24852

The MouseWheel Smooth Scroll WordPress plugin before 5.7 does not have CSRF check in place on its settings page, which could allow attackers to make a logged in admin change them via a CSRF attack...

6.5CVSS6.7AI score0.00549EPSS
SaveExploits2References1
NVD
NVD
•added 2021/11/17 11:15 a.m.•29 views

CVE-2021-24852

The MouseWheel Smooth Scroll WordPress plugin before 5.7 does not have CSRF check in place on its settings page, which could allow attackers to make a logged in admin change them via a CSRF attack...

6.5CVSS0.00549EPSS
SaveExploits2References1
Cvelist
Cvelist
•added 2021/11/17 10:15 a.m.•29 views

CVE-2021-24852 MouseWheel Smooth Scroll < 5.7 - Plugin's Setting Update via CSRF

The MouseWheel Smooth Scroll WordPress plugin before 5.7 does not have CSRF check in place on its settings page, which could allow attackers to make a logged in admin change them via a CSRF attack...

6.6AI score0.00549EPSS
SaveExploits2References1
CVE
CVE
•added 2021/11/17 10:15 a.m.•60 views

CVE-2021-24852

CVE-2021-24852 affects the WordPress plugin "MouseWheel Smooth Scroll" (versions before 5.7). The root cause is a missing CSRF check on the plugin’s settings page, enabling a CSRF attack to cause a logged-in administrator to change settings. Documented impact is cross-site request forgery leading...

6.5CVSS6.3AI score0.00549EPSS
SaveExploits2References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/11/17 12:00 a.m.•1 views

CVE-2021-24852: Cross-Site Request Forgery (CSRF)

The MouseWheel Smooth Scroll WordPress plugin before 5.7 does not have CSRF check in place on its settings page, which could allow attackers to make a logged in admin change them via a CSRF attack...

6.5CVSS5.8AI score0.00549EPSS
SaveExploits2References2
CNNVD
CNNVD
•added 2021/11/17 12:00 a.m.•19 views

WordPress 跨站请求伪造漏洞

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A cross-site request forgery vulnerability exists in the WordPress MouseWheel Smooth Scroll plugin in versions...

6.5CVSS5.5AI score0.00549EPSS
SaveExploits2References2
WPVulnDB
WPVulnDB
•added 2021/10/18 12:00 a.m.•15 views

MouseWheel Smooth Scroll < 5.7 - Plugin's Setting Update via CSRF

The plugin does not have CSRF check in place on its settings page, which could allow attackers to make a logged in admin change them via a CSRF attack PoC...

6.5CVSS4.7AI score0.00549EPSS
SaveExploits2Affected Software1
Rows per page
Query Builder