PT-2021-16310
CVE-2021-24818
·
Published
2021-12-13
·
Updated
2021-12-16
Description by
CVSS 3.1
4.3
MediumMetricsAV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Name of the Vulnerable Software and Affected Versions:
WP Limits WordPress plugin versions 1.0 and earlier
Description:
The issue concerns a lack of CSRF check when saving settings, allowing an attacker to make a logged-in admin change them. This could potentially make the blog unstable by setting low values.
Recommendations:
For WP Limits WordPress plugin versions 1.0 and earlier, update to a version that includes a CSRF check when saving settings to prevent unauthorized changes.
Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾