Staff Directory Plugin

1 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2021-4397 Jul 01, 06:15 MEDIUM PATCH This Month

The Staff Directory Plugin plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 3.6. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Cross-Site Request Forgery (CSRF) vulnerability could allow attackers to trick authenticated users into performing unintended actions.

WordPress CSRF Staff Directory Plugin Wordpress Plugin Goldplugins

NVD

CVSS 3.1

4.3

EPSS

0.1%

CVE-2021-4397

EPSS 0% CVSS 4.3

MEDIUM PATCH This Month

The Staff Directory Plugin plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 3.6. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Cross-Site Request Forgery (CSRF) vulnerability could allow attackers to trick authenticated users into performing unintended actions.

WordPress CSRF Staff Directory Plugin +2

NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy