CVEDB API

Vulnerabilities

By Date
Known Exploited
Advanced Search

Vulnerable Software

Vendors
Products

Vulnerability Details CVE-2021-34637

The Post Index WordPress plugin is vulnerable to Cross-Site Request Forgery via the OptionsPage function found in the ~/php/settings.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 0.7.5.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.001

EPSS Ranking 30.0%

CVSS Severity

CVSS v3 Score 8.8

CVSS v2 Score 6.8

References

https://plugins.trac.wordpress.org/browser/post-index/trunk/php/settings.php#L86
https://www.wordfence.com/vulnerability-advisories/#CVE-2021-34637
https://plugins.trac.wordpress.org/browser/post-index/trunk/php/settings.php#L86
https://www.wordfence.com/vulnerability-advisories/#CVE-2021-34637

Products affected by CVE-2021-34637

Post Index Project » Post Index » Version: N/A

cpe:2.3:a:post_index_project:post_index:-
Post Index Project » Post Index » Version: 0.7.5

cpe:2.3:a:post_index_project:post_index:0.7.5

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2021-34637

Products

Pricing

Contact Us