CVE-2021-24380 | BDVDB-2026-158902 Detail

Shantz WordPress QOTD

Description#

The Shantz WordPress QOTD WordPress plugin through 1.2.2 is lacking any CSRF check when updating its settings, allowing attackers to make logged in administrators change them to arbitrary values.

Impact#

No impact statement in the source data.

Weaknesses#

CWE-352 Cross-Site Request Forgery (CSRF)

References#

https://wpscan.com/vulnerability/1dd0f9a8-22ab-4ecc-a925-605822739000

Exploit#

No public exploit known

History#

Version 12021-08-16Record published in the CVE List.
Version 22024-08-03Most recent update recorded in the CVE List.