CVE-2021-24572CWE-352

CVE-2021-24572: falha em Accept Donations with PayPal

Paypal Donation < 1.3.1 - CSRF to Arbitrary Post Deletion

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar Accept Donations with PayPal

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

3Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackepss 0.5%
The Accept Donations with PayPal WordPress plugin before 1.3.1 provides a function to create donation buttons which are internally stored as posts. The deletion of a button is not CSRF protected and there is no control to check if the deleted post was a button post. As a result, an attacker could make logged in admins delete arbitrary posts
Produtos afetados
Unknown · Accept Donations with PayPal
CVEs relacionadas — Accept Donations with PayPal

No mesmo produto, das mais perigosas para as menos.

CVE-2021-24815—Paypal Donation < 1.3.2 - Admin+ Stored Cross-Site ScriptingEPSS 0.6%CVE-2021-24989—Accept Donations with PayPal < 1.3.4 - Arbitrary Post Deletion via CSRFEPSS 0.5%CVE-2021-24570—Paypal Donation < 1.3.1 - CSRF to Stored Cross-Site ScriptingEPSS 0.5%