CVE-2021-4349

The vulnerability CVE-2021-4349 affects the WordPress plugin “Process Steps Template Designer.” A CSRF flaw exists in versions up to 1.2.1 that allows unauthenticated attackers to induce actions by deceiving an administrator into performing a forged request (e.g., clicking a link). The issue is c...

CVE-2021-4413

The CVE-2021-4413 entry concerns the WordPress Process Steps Template Designer plugin. Affected component: the plugin’s save() function. Root cause: missing or incorrect nonce validation enables Cross-Site Request Forgery (CSRF). Impact: unauthenticated attackers can save field icons via forged r...