CVE-2021-24801

MEDIO 4.3CVE-2021-24801 · Published 08/11/2021 · updated 17/06/2026

In breve

CVE-2021-24801 è una vulnerabilità MEDIO (CVSS 4.3) che riguarda wp survey plus (wp survey plus project).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.45%, superiore al 39.4% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
wp survey plus wp_survey_plus_project	`≤ 1.0`	No fix yet

Description

The WP Survey Plus WordPress plugin through 1.0 does not have any authorisation and CSRF checks in place in its AJAX actions, allowing any user to call them and add/edit/delete Surveys. Furthermore, due to the lack of sanitization in the Surveys' Title, this could also lead to Stored Cross-Site Scripting issues

References

wpscan.com/vulnerability/78405609-2105-4011-b18e-1ba5f438972d · Exploit

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free