CVE-2021-24761
Error Log Viewer < 1.1.2 - Arbitrary Text File Deletion via CSRF
Vexday Risk Score
3Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS —EPSS 0.6%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
01 Feb 2022Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
The Error Log Viewer WordPress plugin before 1.1.2 does not perform nonce check when deleting a log file and does not have path traversal prevention, which could allow attackers to make a logged in admin delete arbitrary text files on the web server.
Affected products
Unknown · Error Log Viewer by BestWebSoftWant to know if your infrastructure is exposed to this?
Talk to TrueHacking →