Lucene search
+L

3 matches found

Cvelist
Cvelist
added 2022/03/07 8:16 a.m.30 views

CVE-2021-25098 Easy Pricing Tables < 3.1.3 - Arbitrary Post Removal via CSRF

The Pricing Tables WordPress Plugin WordPress plugin before 3.1.3 does not verify the CSRF nonce when removing posts, allowing attackers to make a logged in admin remove arbitrary posts from the blog via a CSRF attack, which will be put in the trash...

6.6AI score0.00523EPSS
SaveExploits2References1
WPVulnDB
WPVulnDB
added 2022/02/01 12:0 a.m.28 views

Easy Pricing Tables < 3.1.3 - Arbitrary Post Removal via CSRF

The plugin does not verify the CSRF nonce when removing posts, allowing attackers to make a logged in admin remove arbitrary posts from the blog via a CSRF attack, which will be put in the trash PoC https://example.com/wp-admin/edit.php?posttype=easy-pricing-table=ept3-list=trash=1...

6.5CVSS4.8AI score0.00523EPSS
SaveExploits2Affected Software1
Patchstack
Patchstack
added 2022/02/01 12:0 a.m.18 views

WordPress Easy Pricing Tables plugin <= 3.1.2 - Arbitrary Post Removal via Cross-Site Request Forgery (CSRF) vulnerability

Arbitrary Post Removal via Cross-Site Request Forgery CSRF vulnerability discovered by Krzysztof Zając in WordPress Easy Pricing Tables plugin versions = 3.1.2. Solution Update the WordPress Easy Pricing Tables plugin to the latest available version at least 3.1.3...

6.5CVSS4.3AI score0.00523EPSS
SaveExploits2References3Affected Software1
Rows per page
Query Builder