Not rated
CVE-2021-24989 The Accept Donations with PayPal WordPress plugin before 1.3.4 does not have CSRF check in place and does not ensure…
Description
The Accept Donations with PayPal WordPress plugin before 1.3.4 does not have CSRF check in place and does not ensure that the post to be deleted belongs to the plugin, allowing attackers to make a logged in admin delete arbitrary posts from the blog
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Accept Donations with PayPal 1.3 | earliest → < 1.3.4 | 1.3.4 |
Other CVEs of Accept Donations with PayPal
The 4 CVEs of Accept Donations with PayPal →
CVE-2021-24815
The Accept Donations with PayPal WordPress plugin before 1.3.2 does not escape the Amount Menu Name field of created…
Not rated
CVE-2021-24572
The Accept Donations with PayPal WordPress plugin before 1.3.1 provides a function to create donation buttons which…
Not rated
CVE-2021-24570
The Accept Donations with PayPal WordPress plugin before 1.3.1 offers a function to create donation buttons, which…
Not rated