Read the docs

Wp Admin Logo Changer Project

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Wp Admin Logo Changer Project records in CISA KEV

No Wp Admin Logo Changer Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Wp Admin Logo Changer 1 record LOW

Records

1 record in Wp Admin Logo Changer · all components

TI-2021-07066 CVE-2021-24784 · GHSA-6h38-5hx8-g8v2

WP Admin Logo Changer <= 1.0 - Plugin's Settings Update via CSRF

Priority LOW 30

The WP Admin Logo Changer WordPress plugin through 1.0 does not have CSRF check when saving its settings, which could allow attackers to make a logged in admin update them via a CSRF attack.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00549 Published 2021-12-13 No fix listed CWE-352
Open these records in search →