CVE-2021-25098CWE-352

Easy Pricing Tables < 3.1.3 - Arbitrary Post Removal via CSRF

published March 7, 2022

CVSS
—
EPSS
1%
Percentile
44.1
In the wild
Unconfirmed
What it is

The Pricing Tables WordPress Plugin WordPress plugin before 3.1.3 does not verify the CSRF nonce when removing posts, allowing attackers to make a logged in admin remove arbitrary posts from the blog via a CSRF attack, which will be put in the trash

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00531 · 44.1th percentile
Weakness
CWE-352 · Cross-Site Request Forgery (CSRF)
Published
2022-03-07T08:16Z
EPSS history
Timeline
  • 07 MAR 08:16Z
    Easy Pricing Tables < 3.1.3 - Arbitrary Post Removal via CSRF
    cvelistv5