AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2021-24806

MEDIUM · CVSS 4.3 EPSS 0.47%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2021-11-08 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE
CVE-2021-24806
Severity
MEDIUM
CVSS
4.3
EPSS
0.47%
WordPress

Original NVD Description

The wpDiscuz WordPress plugin before 7.3.4 does check for CSRF when adding, editing and deleting comments, which could allow attacker to make logged in users such as admin edit and delete arbitrary comment, or the user who made the comment to edit it via a CSRF attack. Attackers could also make logged in users post arbitrary comment.