← CVE Intelligence

CVE-2021-24818

WP Limits <= 1.0 - Plugin's Settings Update via CSRF PUBLISHED

Description (CNA)

The WP Limits WordPress plugin through 1.0 does not have CSRF check when saving its settings, allowing attacker to make a logged in admin change them, which could make the blog unstable by setting low values

Affected (CNA)

Vendor / productVersions
Unknown / Wp Limitsaffected 1.0 through 1.0

CWE

CWE-352

References

ADP enrichment

CVE

No English description supplied.