CVE-2021-25098

CVE-2021-25098: Easy Pricing Tables < 3.1.3 - Arbitrary Post Removal via CSRF

Vendor Unknown
Product Pricing Tables WordPress Plugin – Easy Pricing Tables
Weakness CWE-352 · CSRF
Published March 7, 2022
Last update August 3, 2024
View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

The Pricing Tables WordPress Plugin WordPress plugin before 3.1.3 does not verify the CSRF nonce when removing posts, allowing attackers to make a logged in admin remove arbitrary posts from the blog via a CSRF attack, which will be put in the trash

Key dates

02Disclosure timeline

March 7, 2022 CVE published
August 3, 2024 Record updated