Lucene search
+L

3 matches found

attackerkb
attackerkb
•added 2021/10/11 11:15 a.m.•17 views

CVE-2021-24711

The delreistereddomains AJAX action of the Software License Manager WordPress plugin before 4.5.1 does not have any CSRF checks, and is vulnerable to a CSRF attack...

8.8CVSS7.2AI score0.0069EPSS
SaveExploits2References3
CVE
CVE
•added 2021/10/11 10:45 a.m.•67 views

CVE-2021-24711

CVE-2021-24711 affects the Software License Manager WordPress plugin prior to 4.5.1. The root cause is that the del_reistered_domains AJAX action lacks CSRF checks, enabling CSRF attacks that could allow an attacker to delete domains arbitrarily. Documented impact is vulnerable to CSRF with poten...

8.8CVSS8.7AI score0.0069EPSS
SaveExploits2References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/10/11 12:00 a.m.•4 views

CVE-2021-24711: Cross-Site Request Forgery (CSRF)

The delreistereddomains AJAX action of the Software License Manager WordPress plugin before 4.5.1 does not have any CSRF checks, and is vulnerable to a CSRF attack...

8.8CVSS5.8AI score0.0069EPSS
SaveExploits2References2
Rows per page
Query Builder