CVE-2021-24776

Katalog CVE

CVSS 4.3 · Medium EPSS 0,45%

Kerentanan Cross-Site Request Forgery (CSRF) pada wp performance score booster project wp performance score booster. Skor CVSS 3.1 4.3 (Medium) menurut NVD.

Deskripsi (NVD)

The WP Performance Score Booster WordPress plugin before 2.1 does not have CSRF check when saving its settings, which could allow attackers to make a logged in admin change them via a CSRF attack.

Rincian

Terbit di NVD

17 November 2021

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

4.3 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-352: Cross-Site Request Forgery (CSRF)

EPSS (30 hari)

0,45% peluang dieksploitasi; lebih tinggi dari 37,3% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://wpscan.com/vulnerability/a59ebab8-5df7-4093-b853-da9472f53508 exploit · advisory pihak ketiga