coolplugins process steps template designer vulnerabilities

Latest coolplugins process steps template designer CVEs

Newest publication first

1. CVE-2021-4413 Process Steps Template Designer <= 1.2.1 - Cross-Site Request Forgery Bypass

   Published 2023-07-12

   Medium·CVSS 4.3

   The Process Steps Template Designer plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.2.1. This is due to missing or incorrect nonce validation on the save() function. This makes it possible for unauthenticated attackers to save...

2. CVE-2021-4349 Process Steps Template Designer <= 1.2.1 - Cross-Site Request Forgery

   Published 2023-06-07

   High·CVSS 8.8

   The Process Steps Template Designer plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.2.1. This makes it possible for unauthenticated attackers to conduct unspecified attacks via forged request granted they can trick a site admin...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.