CVE-2021-24668CWE-352

MAZ Loader < 1.4.1 - Arbitrary Loader Deletion via CSRF

published November 23, 2021

CVSS
—
EPSS
0%
Percentile
38.1
In the wild
Unconfirmed
What it is

The MAZ Loader WordPress plugin before 1.4.1 does not enforce nonce checks, which allows attackers to make administrators delete arbitrary loaders via a CSRF attack

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00450 · 38.1th percentile
Weakness
CWE-352 · Cross-Site Request Forgery (CSRF)
Published
2021-11-23T19:16Z
EPSS history
Timeline
  • 23 NOV 19:16Z
    MAZ Loader < 1.4.1 - Arbitrary Loader Deletion via CSRF
    cvelistv5