CVE-2021-24802 | BDVDB-2026-164476 Detail

Colorful Categories

Description#

The Colorful Categories WordPress plugin before 2.0.15 does not enforce nonce checks which could allow attackers to make a logged in admin or editor change taxonomy colors via a CSRF attack

Impact#

No impact statement in the source data.

Weaknesses#

CWE-352 Cross-Site Request Forgery (CSRF)

References#

https://wpscan.com/vulnerability/d92db61f-341c-4f3f-b962-326194ddbd1e

Exploit#

No public exploit known

History#

Version 12021-11-17Record published in the CVE List.
Version 22024-08-03Most recent update recorded in the CVE List.