Lucene search
Apple502jWPVDB-ID:DB8ACE7B-7A44-4620-9FE8-DDF0AD520F5EHistoryAug 18, 2021 - 12:00 a.m.
Print My Blog < 3.4.2 - Plugin Deactivation via CSRF
2021-08-1800:00:00
apple502j
wpscan.com
5
0.001 Low
EPSS
Percentile
27.5%
The plugin does not enforce nonce (CSRF) checks, which allows attackers to make logged in administrators deactivate the Print My Blog plugin and delete all saved data for that plugin by tricking them to open a malicious link
PoC
https://example.com/wp-admin/admin.php?page=print-my-blog-projects&action;=uninstall
| CPE | Name | Operator | Version |
|---|---|---|---|
| print-my-blog | lt | 3.4.2 |
Related
cvelist
cvelist
CVE-2021-24636 Print My Blog < 3.4.2 - Plugin Deactivation via CSRF
2021-09-20 10:06:40
nvd
nvd
CVE-2021-24636
2021-09-20 10:15:09
prion
prion
Cross site request forgery (csrf)
2021-09-20 10:15:00
cve
cve
CVE-2021-24636
2021-09-20 10:15:09
wpexploit
wpexploit
Print My Blog < 3.4.2 - Plugin Deactivation via CSRF
2021-08-18 00:00:00