Skip to content
OpenAdvisories

Product · flippercode

WP Security Question

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 4.3
    CVE-2021-4386

    WP Security Question <= 1.0.5 - Cross-Site Request Forgery Bypass

    The WP Security Question plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.0.5. This is due to missing or incorrect nonce validation on the save() function. This makes it possible for unauthenticated attacker…

    flippercode WP Security Question Web / CMS