Not rated
CVE-2021-24572 The Accept Donations with PayPal WordPress plugin before 1.3.1 provides a function to create donation buttons which…
Description
The Accept Donations with PayPal WordPress plugin before 1.3.1 provides a function to create donation buttons which are internally stored as posts. The deletion of a button is not CSRF protected and there is no control to check if the deleted post was a button post. As a result, an attacker could make logged in admins delete arbitrary posts
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Accept Donations with PayPal 1.3 | earliest → < 1.3.1 | 1.3.1 |
Other CVEs of Accept Donations with PayPal
The 4 CVEs of Accept Donations with PayPal →
CVE-2021-24989
The Accept Donations with PayPal WordPress plugin before 1.3.4 does not have CSRF check in place and does not ensure…
Not rated
CVE-2021-24815
The Accept Donations with PayPal WordPress plugin before 1.3.2 does not escape the Amount Menu Name field of created…
Not rated
CVE-2021-24570
The Accept Donations with PayPal WordPress plugin before 1.3.1 offers a function to create donation buttons, which…
Not rated