CVE-2021-23227

Cross-Site Request Forgery CSRF vulnerability in Alexander Fuchs PHP Everywhere plugin = 2.0.2 versions...

CVE-2021-23227 WordPress PHP Everywhere Plugin <= 2.0.2 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Alexander Fuchs PHP Everywhere plugin = 2.0.2 versions...

CVE-2021-23227

CVE-2021-23227 concerns the WordPress PHP Everywhere plugin, where versions ≤ 2.0.2 are vulnerable to a CSRF flaw due to missing CSRF checks when updating settings. Multiple connected sources (WPVulnDB entry, PatchStack, PT-2022-9381, CNNVD, etc.) describe this CSRF, including an indication that ...