CVE-2021-24823

PoC ×2—

CVSS 3.1

8.1 high

EPSS

<1%p44

Published

Feb 28, 2022 (Feb 28, 2022)

Modified

Jun 17, 2026

Description

The Support Board WordPress plugin before 3.3.6 does not have any CSRF checks in actions handled by the include/ajax.php file, which could allow attackers to make logged in users do unwanted actions. For example, make an admin delete arbitrary files

Vendors: schiocco
Products: support board
Ecosystems: WordPress
Weakness: CWE-352
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.5%)

In the news0 stories

No ingested article mentions this CVE yet.