Back to search
CVE-2021-24831
Published: Jan 3, 2022
Modified: Aug 3, 2024
PUBLISHED
Description
All AJAX actions of the Tab WordPress plugin before 1.3.2 are available to both unauthenticated and authenticated users, allowing unauthenticated attackers to modify various data in the plugin, such as add/edit/delete arbitrary tabs.
| Vendor | Product | Versions |
|---|---|---|
Unknown | Tab – Accordion, FAQ | affected 1.3.2 - < 1.3.2 |
Weaknesses (CWE)
References
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now