Skip to content
OpenAdvisories
Unscored CVE-2021-24852 EUVD-2021-11764GHSA-mrp5-j74g-hch7

MouseWheel Smooth Scroll < 5.7 - Plugin's Setting Update via CSRF

Published Nov 17, 2021 · Updated Aug 3, 2024 · Assigned by WPScan

Description

The MouseWheel Smooth Scroll WordPress plugin before 5.7 does not have CSRF check in place on its settings page, which could allow attackers to make a logged in admin change them via a CSRF attack

Affected products

VendorProductAffectedFixed
— MouseWheel Smooth Scroll 5.7 – < 5.7 5.7

References