Lucene search
+L

5 matches found

NVD
NVD
•added 2021/12/13 11:15 a.m.•26 views

CVE-2021-24784

The WP Admin Logo Changer WordPress plugin through 1.0 does not have CSRF check when saving its settings, which could allow attackers to make a logged in admin update them via a CSRF attack...

6.5CVSS0.00531EPSS
SaveExploits2References1
Cvelist
Cvelist
•added 2021/12/13 10:40 a.m.•47 views

CVE-2021-24784 WP Admin Logo Changer <= 1.0 - Plugin's Settings Update via CSRF

The WP Admin Logo Changer WordPress plugin through 1.0 does not have CSRF check when saving its settings, which could allow attackers to make a logged in admin update them via a CSRF attack...

6.6AI score0.00531EPSS
SaveExploits2References1
CVE
CVE
•added 2021/12/13 10:40 a.m.•62 views

CVE-2021-24784

The CVE concerns the WordPress plugin “WP Admin Logo Changer” (versions

6.5CVSS6.3AI score0.00531EPSS
SaveExploits2References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/12/13 12:00 a.m.•4 views

CVE-2021-24784: Cross-Site Request Forgery (CSRF)

The WP Admin Logo Changer WordPress plugin through 1.0 does not have CSRF check when saving its settings, which could allow attackers to make a logged in admin update them via a CSRF attack...

6.5CVSS5.8AI score0.00531EPSS
SaveExploits2References2
wpexploit
wpexploit
•added 2021/11/15 12:00 a.m.•166 views

WP Admin Logo Changer <= 1.0 - Plugin's Settings Update via CSRF

The plugin does not have CSRF check when saving its settings, which could allow attackers to make a logged in admin update them via a CSRF attack. csrf.submit...

6.5CVSS6.3AI score0.00531EPSS
SaveExploits2
Rows per page
Query Builder