CVE-2021-4423

The RAYS Grid plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.2.2. This is due to missing or incorrect nonce validation on the rsgdinsertupdate function. This makes it possible for unauthenticated attackers to update post fields via a forged...

CVE-2021-4423

The CVE-2021-4423 entry concerns the WordPress plugin RAYS Grid. A CSRF vulnerability exists in versions up to 1.2.2 due to missing or incorrect nonce validation in the rsgd_insert_update() function. This flaw can allow unauthenticated attackers to modify post fields by tricking an administrator ...