Lucene search
Muhammad AdelWPEX-ID:67F5BEB8-2CB0-4B43-87C7-DEAD9C005F9CHistoryDec 28, 2021 - 12:00 a.m.
LabTools <= 1.0 - Subscriber+ Arbitrary Publication Deletion
2021-12-2800:00:00
Muhammad Adel
66
0.0005 Low
EPSS
Percentile
16.2%
The plugin does not have proper authorisation and CSRF check in place when deleting publications, allowing any authenticated users, such as subscriber to delete arbitrary publication
The PoC will be displayed once the issue has been remediatedRelated
cvelist
cvelist
CVE-2021-25097 LabTools <= 1.0 - Subscriber+ Arbitrary Publication Deletion
2022-02-01 00:00:00
patchstack
patchstack
wpvulndb
wpvulndb
LabTools <= 1.0 - Subscriber+ Arbitrary Publication Deletion
2021-12-28 00:00:00
cve
cve
CVE-2021-25097
2022-02-01 13:15:09
prion
prion
Cross site request forgery (csrf)
2022-02-01 13:15:00
nvd
nvd
CVE-2021-25097
2022-02-01 13:15:09