Approved changes feed: RSS · Atom

cpe:2.3:a:unknown:shantz_wordpress_qotd:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorUnknown (668ca391-a6cc-5e33-879b-83885214de33)
ProductShantz Wordpress Qotd (c6c348f4-196b-5e11-9488-07cb53b1534b)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-24380 vulnerable 2026-06-08 05:30:04.275590 Shantz WordPress QOTD <= 1.2.2 - Arbitrary Setting Update via CSRF
The Shantz WordPress QOTD WordPress plugin through 1.2.2 is lacking any CSRF check when updating its settings, allowing attackers to make logged in administrators change them to arbitrary values.
Published: 2021-08-16T10:48:18.000Z
Updated: 2024-08-03T19:28:23.765Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.