CVE-2021-24272

The CVE-2021-24272 entry concerns the WordPress fitness calculators plugin prior to 1.9.6. The vulnerability arises from a missing CSRF check and insufficient input sanitization in the plugin’s calculators (Water intake, BMI, protein intake, Body Fat), enabling a logged-in attacker to perform unw...