Lucene search
Krzysztof ZającWPEX-ID:960A634D-A88A-4D90-9AC3-7D24B1FE07FEHistoryFeb 01, 2022 - 12:00 a.m.
Easy Pricing Tables < 3.1.3 - Arbitrary Post Removal via CSRF
2022-02-0100:00:00
Krzysztof Zając
102
0.001 Low
EPSS
Percentile
26.4%
The plugin does not verify the CSRF nonce when removing posts, allowing attackers to make a logged in admin remove arbitrary posts from the blog via a CSRF attack, which will be put in the trash
https://example.com/wp-admin/edit.php?post_type=easy-pricing-table&page=ept3-list&action=trash&post=1Related
cve
cve
CVE-2021-25098
2022-03-07 09:15:08
cnvd
cnvd
WordPress Pricing Tables Plugin Cross-Site Request Forgery Vulnerability
2022-03-09 00:00:00
prion
prion
Cross site request forgery (csrf)
2022-03-07 09:15:00
nvd
nvd
CVE-2021-25098
2022-03-07 09:15:08
wpvulndb
wpvulndb
Easy Pricing Tables < 3.1.3 - Arbitrary Post Removal via CSRF
2022-02-01 00:00:00
patchstack
patchstack
cvelist
cvelist
CVE-2021-25098 Easy Pricing Tables < 3.1.3 - Arbitrary Post Removal via CSRF
2022-03-07 08:16:20