Lucene search
Apple502jWPVDB-ID:6010CE4E-3E46-4CC1-96D8-560B30B605EDHistoryOct 04, 2021 - 12:00 a.m.
Far Future Expiry Header < 1.5 - Plugin's Settings Update via CSRF
2021-10-0400:00:00
apple502j
wpscan.com
7
0.001 Low
EPSS
Percentile
27.4%
The plugin does not have CSRF check when saving its settings, which could allow attackers to make a logged in admin change them via a CSRF attack.
PoC
| CPE | Name | Operator | Version |
|---|---|---|---|
| far-future-expiry-header | lt | 1.5 |
Related
patchstack
patchstack
cvelist
cvelist
nvd
nvd
CVE-2021-24799
2021-11-01 09:15:09
cnvd
cnvd
wpexploit
wpexploit
Far Future Expiry Header < 1.5 - Plugin's Settings Update via CSRF
2021-10-04 00:00:00
prion
prion
Cross site request forgery (csrf)
2021-11-01 09:15:00
cve
cve
CVE-2021-24799
2021-11-01 09:15:09