CVE-2021-25116

CVE-2021-25116 affects the WordPress plugin Enqueue Anything (versions ≤ 1.0.1). The vulnerability stems from missing authorization and CSRF checks in the remove_asset AJAX action and failure to verify that the target is actually an asset, allowing low-privilege users (e.g., subscribers) to delet...