CVE-2021-24696
EUVD-2021-1160824.01.2022, 08:15
The Simple Download Monitor WordPress plugin before 3.9.9 does not enforce nonce checks, which could allow attackers to perform CSRF attacks to 1) make admins export logs to exploit a separate log disclosure vulnerability (fixed in 3.9.6), 2) delete logs (fixed in 3.9.9), 3) remove thumbnail image from downloads
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| tipsandtricks-hq | simple_download_monitor | 𝑥 < 3.9.9 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration