CVE-2021-4400

The CVE-2021-4400 entry concerns the WordPress Better Search plugin. A CSRF vulnerability exists in versions up to 2.5.2 caused by missing or incorrect nonce validation in bsearch_process_settings_import() and bsearch_process_settings_export(). This enables unauthenticated attackers to import and...

CVE-2021-4373

The CVE-2021-4373 entry concerns the WordPress Better Search plugin with a Cross-Site Request Forgery vulnerability in versions up to 2.5.2. The issue allows unauthenticated attackers to import settings by tricking a site administrator into performing a forged request. Impact: potential unauthori...