CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

4 matches found

NVD•added 2022/06/15 8:15 p.m.•22 views

CVE-2021-36891

Cross-Site Request Forgery CSRF vulnerability in Photo Gallery by Supsystic plugin = 1.15.5 at WordPress allows changing the plugin settings...

5.4CVSS0.00381EPSS

SaveExploits1References2

Vulnrichment•added 2022/06/15 7:16 p.m.•12 views

CVE-2021-36891 WordPress Photo Gallery by Supsystic plugin <= 1.15.5 - Cross-Site Request Forgery (CSRF) leading to Plugin Settings Change

Cross-Site Request Forgery CSRF vulnerability in Photo Gallery by Supsystic plugin = 1.15.5 at WordPress allows changing the plugin settings...

5.4CVSS5.5AI score0.00381EPSS

SaveExploits1References2

CVE•added 2022/06/15 7:16 p.m.•96 views

CVE-2021-36891

The CVE describes a CSRF flaw in the WordPress Photo Gallery by Supsystic plugin (versions ≤ 1.15.5) that allows changing plugin settings without proper CSRF protection. The root cause is lack of CSRF checks when updating settings, enabling an attacker to trigger settings changes via a CSRF attac...

5.4CVSS4.7AI score0.00381EPSS

SaveExploits1References2Affected Software1

Cvelist•added 2022/06/15 7:16 p.m.•39 views

CVE-2021-36891 WordPress Photo Gallery by Supsystic plugin <= 1.15.5 - Cross-Site Request Forgery (CSRF) leading to Plugin Settings Change

Cross-Site Request Forgery CSRF vulnerability in Photo Gallery by Supsystic plugin = 1.15.5 at WordPress allows changing the plugin settings...

5.4CVSS5.9AI score0.00381EPSS

SaveExploits1References2

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by