Not rated
CVE-2021-24668 The MAZ Loader WordPress plugin before 1.4.1 does not enforce nonce checks, which allows attackers to make…
Description
The MAZ Loader WordPress plugin before 1.4.1 does not enforce nonce checks, which allows attackers to make administrators delete arbitrary loaders via a CSRF attack
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| MAZ Loader – Preloader Builder for WordPress 1.4 | earliest → < 1.4.1 | 1.4.1 |