CVE-2021-24636CWE-352

Print My Blog < 3.4.2 - Plugin Deactivation via CSRF

published September 20, 2021

CVSS
—
EPSS
1%
Percentile
44.4
In the wild
Unconfirmed
What it is

The Print My Blog WordPress Plugin before 3.4.2 does not enforce nonce (CSRF) checks, which allows attackers to make logged in administrators deactivate the Print My Blog plugin and delete all saved data for that plugin by tricking them to open a malicious link

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00537 · 44.4th percentile
Weakness
CWE-352 · Cross-Site Request Forgery (CSRF)
Published
2021-09-20T10:06Z
EPSS history
Timeline
  • 20 SEP 10:06Z
    Print My Blog < 3.4.2 - Plugin Deactivation via CSRF
    cvelistv5