CVE-2021-24831CWE-862

Tab - Accordion, FAQ < 1.3.2 - Unauthenticated AJAX Calls

published January 3, 2022

CVSS
—
EPSS
1%
Percentile
67.8
In the wild
Unconfirmed
What it is

All AJAX actions of the Tab WordPress plugin before 1.3.2 are available to both unauthenticated and authenticated users, allowing unauthenticated attackers to modify various data in the plugin, such as add/edit/delete arbitrary tabs.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01196 · 67.8th percentile
Weakness
CWE-862 · Missing Authorization
Published
2022-01-03T12:49Z
EPSS history
Timeline
  • 03 JAN 12:49Z
    Tab - Accordion, FAQ < 1.3.2 - Unauthenticated AJAX Calls
    cvelistv5