Skip to content

Product

flippercode WP Security Question vulnerabilities

1 published CVE affecting flippercode WP Security Question, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
1
Critical
0
High
0
Medium
1
Low
0
Unscored
0
CISA KEV
0

Latest flippercode WP Security Question CVEs

Newest publication first

  1. CVE-2021-4386 WP Security Question <= 1.0.5 - Cross-Site Request Forgery Bypass

    Published
    MediumCVSS 4.3 EPSS 0.38%

    The WP Security Question plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.0.5. This is due to missing or incorrect nonce validation on the save() function. This makes it possible for unauthenticated attackers to modify the plugi...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.