CVE-2021-25098: vulnerability in Pricing Tables WordPress Plugin – Easy Pricing…
Easy Pricing Tables < 3.1.3 - Arbitrary Post Removal via CSRF
Published · Updated
3Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackepss 0.5%
exploitation probability
0.5%top 57% of all CVEs
observed exploitation
nono source reports it
The Pricing Tables WordPress Plugin WordPress plugin before 3.1.3 does not verify the CSRF nonce when removing posts, allowing attackers to make a logged in admin remove arbitrary posts from the blog via a CSRF attack, which will be put in the trash
Affected products
Unknown · Pricing Tables WordPress Plugin – Easy Pricing TablesRelated CVEs — Pricing Tables WordPress Plugin – Easy Pricing…
In the same product, most dangerous first.