Security Advisory

CVE-2021-34620

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2021-07-07 12:21:04

Last updated 2024-10-15 19:09:35

Assigner Wordfence

CVSS score not scored

State PUBLISHED

Description

The WP Fluent Forms plugin < 3.6.67 for WordPress is vulnerable to Cross-Site Request Forgery leading to stored Cross-Site Scripting and limited Privilege Escalation due to a missing nonce check in the access control function for administrative AJAX actions

← Browse all CVEs View on cve.org ↗