CVE-2021-24989

PoC —

CVSS 3.1

6.5 medium

EPSS

<1%p44

Published

Jan 24, 2022 (Jan 24, 2022)

Modified

Jun 17, 2026

Description

The Accept Donations with PayPal WordPress plugin before 1.3.4 does not have CSRF check in place and does not ensure that the post to be deleted belongs to the plugin, allowing attackers to make a logged in admin delete arbitrary posts from the blog

Vendors: wpplugin
Products: accept donations with paypal
Ecosystems: WordPress
Weakness: CWE-352
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

NVD CVE.org GitHub PoCs EPSS (0.5%)

In the news0 stories

No ingested article mentions this CVE yet.