CVE-2021-24711
Assigner: WPScan
Published: 2021-10-11T10:45:45
State: PUBLISHED
affected: product: Software License Manager
vendor: Unknown
versions: lessThan: 4.5.1
status: affected
version: 4.5.1
versionType: custom
credits: value: Harald Eilertsen (JetPack)
descriptions: value: The del_reistered_domains AJAX action of the Software License Manager WordPress plugin before 4.5.1 does not have any CSRF checks, and is vulnerable to a CSRF attack
problemTypes: descriptions: cweId: CWE-352
description: CWE-352 Cross-Site Request Forgery (CSRF)
type: CWE
source: discovery: EXTERNAL
title: Software License Manager < 4.5.1 - Arbitrary Domain Deletion via CSRF
x_generator: WPScan CVE Generator