Not rated
CVE-2021-24784 The WP Admin Logo Changer WordPress plugin through 1.0 does not have CSRF check when saving its settings, which could…
Description
The WP Admin Logo Changer WordPress plugin through 1.0 does not have CSRF check when saving its settings, which could allow attackers to make a logged in admin update them via a CSRF attack.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| WP Admin Logo Changer | 1.0 | No fix stated |