CVE-2021-24333

Content Copy Protection & Prevent Image Save <= 1.3 - CSRF to Stored Cross-Site Scripting (XSS)

The Content Copy Protection & Prevent Image Save WordPress plugin through 1.3 does not check for CSRF when saving its settings, not perform any validation and sanitisation on them, allowing attackers to make a logged in administrator set arbitrary XSS payloads in them.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed

Vendors

Content Copy Protection \& Prevent Image Save Project

Products

Content Copy Protection \& Prevent Image Save

CVE-2021-24328

WP Login Security and History <= 1.0 - CSRF to Stored Cross-Site Scripting (XSS)

The WP Login Security and History WordPress plugin through 1.0 did not have CSRF check when saving its settings, not any sanitisation or validation on them. This could allow attackers to make logged in administrators change the plugin's settings to arbitrary values, and set XSS payloads on them as well

CVSS 3.1 · 6.2 Medium EPSS < 1% KEV · Not listed

Vendors

Clogica

Products

Wp Login Security And History

CVE-2021-24324

404 SEO Redirection <= 1.3 - CSRF to Stored Cross-Site Scripting (XSS)

The 404 SEO Redirection WordPress plugin through 1.3 is lacking CSRF checks in all its settings, allowing attackers to make a logged in user change the plugin's settings. Due to the lack of sanitisation and escaping in some fields, it could also lead to Stored Cross-Site Scripting issues

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed

Vendors

Clogica

Products

All 404 Redirect To Homepage

CVE-2021-24272

Fitness Calculators < 1.9.6 - Cross-Site Request Forgery to Cross-Site Scripting (XSS)

The fitness calculators WordPress plugin before 1.9.6 add calculators for Water intake, BMI calculator, protein Intake, and Body Fat and was lacking CSRF check, allowing attackers to make logged in users perform unwanted actions, such as change the calculator headers. Due to the lack of sanitisation, this could also lead to a Stored Cross-Site Scripting issue

CVSS 3.1 · 4.3 Medium EPSS 1.8% KEV · Not listed

Vendors

Codeinitiator

Products

Fitness Calculators

CVE-2021-24251

Business Directory Plugin < 5.11.2 - Arbitrary Payment History Update

The Business Directory Plugin – Easy Listing Directories for WordPress WordPress plugin before 5.11.2 suffered from a Cross-Site Request Forgery issue, allowing an attacker to make a logged in administrator update arbitrary payment history, such as change their status (from pending to completed to example)

CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed

Vendors

Strategy11

Products

Business Directory Plugin - Easy Listing Directories

CVE-2021-24249

Business Directory Plugin < 5.11.2 - Arbitrary Listing Export

The Business Directory Plugin – Easy Listing Directories for WordPress WordPress plugin before 5.11.2 suffered from a Cross-Site Request Forgery issue, allowing an attacker to make a logged in administrator export files, which could then be downloaded by the attacker to get access to PII, such as email, home addresses etc

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed

Vendors

Strategy11

Products

Business Directory Plugin - Easy Listing Directories

CVE-2021-24231

Patreon WordPress < 1.7.0 - CSRF to Disconnect Sites From Patreon

The Jetpack Scan team identified a Cross-Site Request Forgery vulnerability in the Patreon WordPress plugin before 1.7.0, allowing attackers to make a logged administrator disconnect the site from Patreon by visiting a specially crafted link.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed

Vendors

Patreon

Products

Patreon Wordpress

CVE-2021-24230

Patreon WordPress < 1.7.0 - CSRF to Overwrite/Create User Meta

The Jetpack Scan team identified a Cross-Site Request Forgery vulnerability in the Patreon WordPress plugin before 1.7.0, allowing attackers to make a logged in user overwrite or create arbitrary user metadata on the victim’s account once visited. If exploited, this bug can be used to overwrite the “wp_capabilities” meta, which contains the affected user account’s roles and privileges. Doing this would essentially lock them out of the site, blocking them from accessing paid content.

CVSS 3.1 · 8.1 High EPSS < 1% KEV · Not listed

Vendors

Patreon

Products

Patreon Wordpress

CVE-2021-24218

Facebook for WordPress 3.0.0-3.0.3 - CSRF to Stored XSS and Settings Deletion

The wp_ajax_save_fbe_settings and wp_ajax_delete_fbe_settings AJAX actions of the Facebook for WordPress plugin before 3.0.4 were vulnerable to CSRF due to a lack of nonce protection. The settings in the saveFbeSettings function had no sanitization allowing for script tags to be saved.

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed

Vendors

Facebook

Products

Facebook

CVE-2021-24179

Business Directory Plugin < 5.11 - Arbitrary File Upload to RCE

The Business Directory Plugin – Easy Listing Directories for WordPress WordPress plugin before 5.11 suffered from a Cross-Site Request Forgery issue, allowing an attacker to make a logged in administrator import files. As the plugin also did not validate uploaded files, it could lead to RCE.

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed

Vendors

Strategy11

Products

Business Directory Plugin - Easy Listing Directories

CVE-2021-24178

Business Directory Plugin < 5.11.1 - Arbitrary Add/Edit/Delete Form Field to Stored XSS

The Business Directory Plugin – Easy Listing Directories for WordPress WordPress plugin before 5.11.1 suffered from Cross-Site Request Forgery issues, allowing an attacker to make a logged in administrator add, edit or delete form fields, which could also lead to Stored Cross-Site Scripting issues.

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed

Vendors

Strategy11

Products

Business Directory Plugin - Easy Listing Directories

CVE-2021-24174

Database Backups <= 1.2.2.6 - CSRF to Backup Download

The Database Backups WordPress plugin through 1.2.2.6 does not have CSRF checks, allowing attackers to make a logged in user unwanted actions, such as generate backups of the database, change the plugin's settings and delete backups.

CVSS 3.1 · 8.1 High EPSS 3.2% KEV · Not listed

Vendors

Database-backups Project

Products

Database-backups

CVE-2021-24173

VM Backups <= 1.0 - CSRF to Stored Cross-Site Scripting (XSS)

The VM Backups WordPress plugin through 1.0 does not have CSRF checks, allowing attackers to make a logged in user unwanted actions, such as update the plugin's options, leading to a Stored Cross-Site Scripting issue.

CVSS 3.1 · 6.1 Medium EPSS < 1% KEV · Not listed

Vendors

Vm Backups Project

Products

Vm Backups

CVE-2021-24172

VM Backups <= 1.0 - CSRF to Database Backup Download

The VM Backups WordPress plugin through 1.0 does not have CSRF checks, allowing attackers to make a logged in user unwanted actions, such as generate backups of the DB, plugins, and current .

CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed

Vendors

Vm Backups Project

Products

Vm Backups

CVE-2021-24166

Ninja Forms < 3.4.34 - CSRF to OAuth Service Disconnection

The wp_ajax_nf_oauth_disconnect from the Ninja Forms Contact Form – The Drag and Drop Form Builder for WordPress WordPress plugin before 3.4.34 had no nonce protection making it possible for attackers to craft a request to disconnect a site's OAuth connection.

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed

Vendors

Ninjaforms

Products

Ninja Forms

CVE-2021-24162

Responsive Menu < 4.0.4 - CSRF to Settings Update

In the Reponsive Menu (free and Pro) WordPress plugins before 4.0.4, attackers could craft a request and trick an administrator into importing all new settings. These settings could be modified to include malicious JavaScript, therefore allowing an attacker to inject payloads that could aid in further infection of the site.

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed

Vendors

Expresstech

Products

Responsive Menu

CVE-2021-24161

Responsive Menu < 4.0.4 - CSRF to Arbitrary File Upload

In the Reponsive Menu (free and Pro) WordPress plugins before 4.0.4, attackers could craft a request and trick an administrator into uploading a zip archive containing malicious PHP files. The attacker could then access those files to achieve remote code execution and further infect the targeted site.

CVSS 3.1 · 8.8 High EPSS 1.2% KEV · Not listed

Vendors

Expresstech

Products

Responsive Menu

CVE-2021-24159

Contact Form 7 Style <= 3.1.9 - Cross-Site Request Forgery to Stored Cross-Site Scripting

Due to the lack of sanitization and lack of nonce protection on the custom CSS feature, an attacker could craft a request to inject malicious JavaScript on a site using the Contact Form 7 Style WordPress plugin through 3.1.9. If an attacker successfully tricked a site’s administrator into clicking a link or attachment, then the request could be sent and the CSS settings would be successfully updated to include malicious JavaScript.

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed

Vendors

Rocklobster

Products

Contact Form 7

CVE-2021-24133

ActiveCampaign < 8.0.2 - Cross-Site Request Forgery in Settings

Lack of CSRF checks in the ActiveCampaign WordPress plugin, versions before 8.0.2, on its Settings form, which could allow attacker to make a logged-in administrator change API Credentials to attacker's account.

CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed

Vendors

Activecampaign

Products

Activecampaign

CVE-2021-23849

Cross Site Request Forgery (CSRF) vulnerability in web based management interface

A vulnerability in the web-based interface allows an unauthenticated remote attacker to trigger actions on an affected system on behalf of another user (CSRF - Cross Site Request Forgery). This requires the victim to be tricked into clicking a malicious link or opening a malicious website while being logged in into the camera.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed

Vendors

Bosch

Products

Aviotec Aviotec Firmware Cpp13 and 11 more