TI-2021-06755 CVE-2021-24466 · GHSA-3767-6mf5-hjrvVerse-O-Matic <= 4.1.1 - CSRF to Stored XSSPriority LOW 27The Verse-O-Matic WordPress plugin through 4.1.1 does not have any CSRF checks in place, allowing attackers to make logged in administrators do unwanted actions, such as add/edit/delete arbitrary verses and change the se…CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00412 · Published 2021-08-16 · No fix listed CWE-352