CVE-2021-24636CWE-352

CVE-2021-24636: vulnerability in Print My Blog – Print, PDF, & eBook Converter…

Print My Blog < 3.4.2 - Plugin Deactivation via CSRF

Published · Updated

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 0.5%
The Print My Blog WordPress Plugin before 3.4.2 does not enforce nonce (CSRF) checks, which allows attackers to make logged in administrators deactivate the Print My Blog plugin and delete all saved data for that plugin by tricking them to open a malicious link