2 matches found
CVE-2021-24668
The MAZ Loader WordPress plugin before 1.4.1 does not enforce nonce checks, which allows attackers to make administrators delete arbitrary loaders via a CSRF attack...
4.3CVSS5.9AI score0.0045EPSS
SaveExploits2References1
CVE-2021-24668: Cross-Site Request Forgery (CSRF)
The MAZ Loader WordPress plugin before 1.4.1 does not enforce nonce checks, which allows attackers to make administrators delete arbitrary loaders via a CSRF attack...
4.3CVSS5.9AI score0.0045EPSS
SaveExploits2References3
20