CVE-2021-4425

CVE-2021-4425 affects the Defender Security plugin for WordPress. The vulnerability is a Cross-Site Request Forgery due to missing or incorrect nonce validation in the verify_otp_login_time() function, across versions up to and including 2.4.6. This can allow unauthenticated attackers to verify a...