CVE-2021-4387
Opal Estate <= 1.6.11 - Cross-Site Request Forgery Bypass
Severity Score
8.8
*CVSS v3.1
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
1
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
Track
*SSVC
Descriptions
The Opal Estate plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.6.11. This is due to missing or incorrect nonce validation on the opalestate_set_feature_property() and opalestate_remove_feature_property() functions. This makes it possible for unauthenticated attackers to set and remove featured properties via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.
*Credits:
Jerome Bruandet
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:Track
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2021-08-16 CVE Published
- 2023-06-30 CVE Reserved
- 2024-10-25 CVE Updated
- 2024-10-25 First Exploit
- 2024-11-01 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
CWE
- CWE-352: Cross-Site Request Forgery (CSRF)
CAPEC
References (9)
| URL | Tag | Source |
|---|---|---|
| https://blog.nintechnet.com/25-wordpress-plugins-vulnerable-to-csrf-attacks | Third Party Advisory | |
| https://blog.nintechnet.com/more-wordpress-plugins-and-themes-vulnerable-to-csrf-attacks | Third Party Advisory | |
| https://blog.nintechnet.com/multiple-wordpress-plugins-fixed-csrf-vulnerabilities-part-1 | Third Party Advisory | |
| https://blog.nintechnet.com/multiple-wordpress-plugins-fixed-csrf-vulnerabilities-part-2 | Third Party Advisory | |
| https://blog.nintechnet.com/multiple-wordpress-plugins-fixed-csrf-vulnerabilities-part-3 | Third Party Advisory | |
| https://blog.nintechnet.com/multiple-wordpress-plugins-fixed-csrf-vulnerabilities-part-4 | Third Party Advisory | |
| https://plugins.trac.wordpress.org/browser/opal-estate/trunk/inc/ajax-functions.php#L177 | Not Applicable | |
| https://www.wordfence.com/threat-intel/vulnerabilities/id/2645899c-2b6b-48bd-8f33-2a837a951c5e?source=cve | Third Party Advisory |
| URL | Date | SRC |
|---|---|---|
| https://blog.nintechnet.com/multiple-wordpress-plugins-fixed-csrf-vulnerabilities-part-5 | 2024-10-25 |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Wpopal Search vendor "Wpopal" | Opal Estate Search vendor "Wpopal" for product "Opal Estate" | <= 1.6.11 Search vendor "Wpopal" for product "Opal Estate" and version " <= 1.6.11" | wordpress |
Affected
| ||||||