CVE-2021-24668

The MAZ Loader WordPress plugin before 1.4.1 does not enforce nonce checks, which allows attackers to make administrators delete arbitrary loaders via a CSRF attack...

CVE-2021-24668

The vulnerability CVE-2021-24668 affects the WordPress plugin MAZ Loader, specifically versions before 1.4.1. The root cause is missing nonce checks, enabling CSRF attacks that let an attacker cause administrators to delete arbitrary loaders. Impact is described as arbitrary loader deletion via C...