Skip to content
OpenAdvisories
Unscored CVE-2021-24802 EUVD-2021-11714GHSA-fq6v-9x93-2hc2

Colorful Categories < 2.0.15 - Arbitrary Colors Update via CSRF

Published Nov 17, 2021 · Updated Aug 3, 2024 · Assigned by WPScan

Description

The Colorful Categories WordPress plugin before 2.0.15 does not enforce nonce checks which could allow attackers to make a logged in admin or editor change taxonomy colors via a CSRF attack

Affected products

VendorProductAffectedFixed
— Colorful Categories 2.0.15 – < 2.0.15 2.0.15

References