CVE-2021-24799

CVE-2021-24799: Far Future Expiry Header < 1.5 - Plugin's Settings Update via CSRF

Vendor Unknown
Product Far Future Expiry Header
Weakness CWE-352 · CSRF
Published November 1, 2021
Last update August 3, 2024
View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

The Far Future Expiry Header WordPress plugin before 1.5 does not have CSRF check when saving its settings, which could allow attackers to make a logged in admin change them via a CSRF attack.

Key dates

02Disclosure timeline

November 1, 2021 CVE published
August 3, 2024 Record updated