CVE-2021-25098 Easy Pricing Tables < 3.1.3 - Arbitrary Post Removal via CSRF

The Pricing Tables WordPress Plugin WordPress plugin before 3.1.3 does not verify the CSRF nonce when removing posts, allowing attackers to make a logged in admin remove arbitrary posts from the blog via a CSRF attack, which will be put in the trash...

CVE-2021-25098

The CVE concerns the Easy Pricing Tables (Pricing Tables WordPress Plugin) before version 3.1.3, which does not verify the CSRF nonce when deleting posts. This CSRF weakness allows an authenticated attacker to trigger a logged-in admin to remove arbitrary posts, with affected posts moved to trash...