Lucene search
Apple502jWPEX-ID:DB8ACE7B-7A44-4620-9FE8-DDF0AD520F5EHistoryAug 18, 2021 - 12:00 a.m.
Print My Blog < 3.4.2 - Plugin Deactivation via CSRF
2021-08-1800:00:00
apple502j
359
0.001 Low
EPSS
Percentile
27.4%
The plugin does not enforce nonce (CSRF) checks, which allows attackers to make logged in administrators deactivate the Print My Blog plugin and delete all saved data for that plugin by tricking them to open a malicious link
https://example.com/wp-admin/admin.php?page=print-my-blog-projects&action=uninstallRelated
cvelist
cvelist
CVE-2021-24636 Print My Blog < 3.4.2 - Plugin Deactivation via CSRF
2021-09-20 10:06:40
prion
prion
Cross site request forgery (csrf)
2021-09-20 10:15:00
nvd
nvd
CVE-2021-24636
2021-09-20 10:15:09
wpvulndb
wpvulndb
Print My Blog < 3.4.2 - Plugin Deactivation via CSRF
2021-08-18 00:00:00
cve
cve
CVE-2021-24636
2021-09-20 10:15:09