CVE-2021-24832
The WP SEO Redirect 301 WordPress plugin before 2.3.2 does not have CSRF in place when deleting redirects, which could allow attackers to make a logged in admin delete them via a CSRF attack
- Affected products
- Wp Seo Redirect 301
- Wp Seo Redirect 301 Project Wp Seo Redirect 301
- < 2.3.2
- Fix
- Available
- CVSS 3.1
- 4.3 MEDIUM
- EPSS
- 0.4% (37th percentile)
- Weakness
- CWE-352
- NVD status
- Modified
- Published
- 2021-11-08
CVE-2021-24832 at NVD
1 known exploit for CVE-2021-24832
Proof-of-concept code and exploit modules indexed by Sploitus