Read the docs

Shantz Wordpress Qotd Project

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Shantz Wordpress Qotd Project records in CISA KEV

No Shantz Wordpress Qotd Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Shantz Wordpress Qotd 1 record LOW

Records

1 record in Shantz Wordpress Qotd · all components

TI-2021-06672 CVE-2021-24380 · GHSA-cqhr-j9fp-qjmw

Shantz WordPress QOTD <= 1.2.2 - Arbitrary Setting Update via CSRF

Priority LOW 20

The Shantz WordPress QOTD WordPress plugin through 1.2.2 is lacking any CSRF check when updating its settings, allowing attackers to make logged in administrators change them to arbitrary values.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.0045 Published 2021-08-16 No fix listed CWE-352
Open these records in search →