Skip to content
OpenAdvisories
High · 8.8 CVE-2021-4349 EUVD-2021-34176GHSA-g64p-mjcm-6hp9

Process Steps Template Designer <= 1.2.1 - Cross-Site Request Forgery

Published Jun 7, 2023 · Updated Apr 8, 2026 · Assigned by Wordfence

Description

The Process Steps Template Designer plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.2.1. This makes it possible for unauthenticated attackers to conduct unspecified attacks via forged request granted they can trick a site administrator into performing an action such as clicking on a link.

Affected products

VendorProductAffectedFixed
narinder-singh Process Steps Template Designer < 1.3 1.3

References