← CVE Intelligence

CVE-2021-24668

MAZ Loader < 1.4.1 - Arbitrary Loader Deletion via CSRF PUBLISHED

Description (CNA)

The MAZ Loader WordPress plugin before 1.4.1 does not enforce nonce checks, which allows attackers to make administrators delete arbitrary loaders via a CSRF attack

Affected (CNA)

Vendor / productVersions
Unknown / MAZ Loader – Preloader Builder for WordPressaffected 1.4.1 before 1.4.1

CWE

CWE-352

References

ADP enrichment

CVE

No English description supplied.