Aller au contenu
Se connecter
Non notée

CVE-2021-24761 The Error Log Viewer WordPress plugin before 1.1.2 does not perform nonce check when deleting a log file and does not…

Description

The Error Log Viewer WordPress plugin before 1.1.2 does not perform nonce check when deleting a log file and does not have path traversal prevention, which could allow attackers to make a logged in admin delete arbitrary text files on the web server.

Produits et versions touchés

Produit Versions touchées Corrigé en
Error Log Viewer by BestWebSoft 1.1 premières → < 1.1.2 1.1.2

Autres CVE de Error Log Viewer by BestWebSoft

Les 3 CVE de Error Log Viewer by BestWebSoft →
CVE-2023-6821 The Error Log Viewer by BestWebSoft WordPress plugin before 1.1.3 is affected by a Directory Listing issue, allowing… 6.5 Moyenne CVE-2021-24966 The Error Log Viewer WordPress plugin through 1.1.1 does not validate the path of the log file to clear, allowing high… Non notée
Suivre cette CVE