Lucene search
WpvulndbWPVDB-ID:44979222-CF49-4851-80E1-338CCBD9DC8CHistoryAug 06, 2021 - 12:00 a.m.
WP Fusion Lite < 3.37.30 - CSRF to Data Deletion
2021-08-0600:00:00
wpscan.com
16
wp fusion
cross-site request forgery
data deletion
vulnerability
logging
EPSS
0.001
Percentile
21.6%
The plugin is vulnerable to Cross-Site Request Forgery via the show_logs_section function found in the ~/includes/admin/logging/class-log-handler.php file which allows attackers to drop all logs for the plugin
Related
cvelist
cvelist
prion
prion
Cross site request forgery (csrf)
2021-08-09 13:15:00
cve
cve
CVE-2021-34661
2021-08-09 13:15:07
nvd
nvd
CVE-2021-34661
2021-08-09 13:15:07
patchstack
patchstack