CVE-2021-36914

MEDIO 6.1CVE-2021-36914 · Published 12/04/2022 · updated 17/06/2026

In breve

CVE-2021-36914 è una vulnerabilità MEDIO (CVSS 6.1) che riguarda calderawp license manager (claderaform).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.51%, superiore al 43.8% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
calderawp license manager claderaform	`≤ 1.2.11`	No fix yet

Description

Cross-Site Request Forgery (CSRF) vulnerability leading to Reflected Cross-Site Scripting (XSS) in CalderaWP License Manager (WordPress plugin) <= 1.2.11.

References

CalderaWP/calderawp-license-manager · Product
patchstack.com/database/vulnerability/calderawp-license-manager/wordpress-calderawp-license-manager-plugin-1-2-11-cross-site-request-forgery-csrf-vulnerability-leading-to-reflected-cross-site-scripting-xss · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free