← CVE Intelligence

CVE-2021-24779

WP Debugging < 2.11.0 - Unauthenticated Plugin's Settings Update PUBLISHED

Description (CNA)

The WP Debugging WordPress plugin before 2.11.0 has its update_settings() function hooked to admin_init and is missing any authorisation and CSRF checks, as a result, the settings can be updated by unauthenticated users.

Affected (CNA)

Vendor / productVersions
Unknown / WP Debuggingaffected 2.11.0 before 2.11.0

CWE

CWE-862

References

ADP enrichment

CVE

No English description supplied.