Lucene search
+L

10 matches found

NVD
NVD
•added 2021/08/16 11:15 a.m.•33 views

CVE-2021-24380

The Shantz WordPress QOTD WordPress plugin through 1.2.2 is lacking any CSRF check when updating its settings, allowing attackers to make logged in administrators change them to arbitrary values...

4.3CVSS0.0045EPSS
SaveExploits2References1
Prion
Prion
•added 2021/08/16 11:15 a.m.•23 views

Cross site request forgery (csrf)

The Shantz WordPress QOTD WordPress plugin through 1.2.2 is lacking any CSRF check when updating its settings, allowing attackers to make logged in administrators change them to arbitrary values...

4.3CVSS4.8AI score0.0045EPSS
SaveExploits2References1Affected Software1
CVE
CVE
•added 2021/08/16 10:48 a.m.•109 views

CVE-2021-24380

CVE-2021-24380 affects Shantz WordPress QOTD plugin (≤ 1.2.2). The issue is a missing CSRF check when updating settings, enabling an attacker with logged-in admin rights to modify settings to arbitrary values. Documents confirm the weakness is in the settings update path, allowing arbitrary value...

4.3CVSS4.7AI score0.0045EPSS
SaveExploits2References1Affected Software1
Cvelist
Cvelist
•added 2021/08/16 10:48 a.m.•42 views

CVE-2021-24380 Shantz WordPress QOTD <= 1.2.2 - Arbitrary Setting Update via CSRF

The Shantz WordPress QOTD WordPress plugin through 1.2.2 is lacking any CSRF check when updating its settings, allowing attackers to make logged in administrators change them to arbitrary values...

5.1AI score0.0045EPSS
SaveExploits2References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/08/16 12:00 a.m.•4 views

CVE-2021-24380: Cross-Site Request Forgery (CSRF)

The Shantz WordPress QOTD WordPress plugin through 1.2.2 is lacking any CSRF check when updating its settings, allowing attackers to make logged in administrators change them to arbitrary values...

4.3CVSS5.9AI score0.0045EPSS
SaveExploits2References3
wpexploit
wpexploit
•added 2021/07/19 12:00 a.m.•893 views

Shantz WordPress QOTD <= 1.2.2 - Arbitrary Setting Update via CSRF

The plugin is lacking any CSRF check when updating its settings, allowing attackers to make logged in administrators change them to arbitrary values...

4.3CVSS1.3AI score0.0045EPSS
SaveExploits2
WPVulnDB
WPVulnDB
•added 2021/07/19 12:00 a.m.•23 views

Shantz WordPress QOTD <= 1.2.2 - Arbitrary Setting Update via CSRF

The plugin is lacking any CSRF check when updating its settings, allowing attackers to make logged in administrators change them to arbitrary values. PoC...

4.3CVSS5.8AI score0.0045EPSS
SaveExploits2Affected Software1
OpenVAS
OpenVAS
•added 2020/08/28 12:00 a.m.•56 views

Quote of the Day (qotd) Service Detection (UDP)

UDP based detection of a Quote of the Day qotd service. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you c...

7.3AI score
SaveExploits0
OpenVAS
OpenVAS
•added 2020/08/28 12:00 a.m.•69 views

Quote of the Day (qotd) Service Detection (TCP)

TCP based detection of a Quote of the Day qotd service. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you c...

SaveExploits0
OpenVAS
OpenVAS
•added 2005/11/03 12:00 a.m.•151 views

Check for Quote of the Day (qotd) Service (TCP)

The Quote of the Day qotd service is running on this host. SPDX-FileCopyrightText: 1999 Mathieu Perrin Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5CVSS6.3AI score0.14515EPSS
SaveExploits2
Rows per page
Query Builder