CVE-2021-24446

5.4 mediumEPSS 0.3%

Medium (5.4) in wpchill remove footer credit. EPSS 0.3% chance of exploitation in the next 30 days.

The Remove Footer Credit WordPress plugin before 1.0.6 does not have CSRF check in place when saving its settings, which could allow attacker to make logged in admins change them and lead to Stored XSS issue as well due to the lack of sanitisation

Severity

CVSS 3.1

5.4 medium

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 26% of CVEs (scores of 2026-10-31)
CWE: CWE-352
Published: 2022-02-14
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

wpchill:remove_footer_credit

References

https://wpscan.com/vulnerability/be55131b-d9f2-4ac1-b667-c544c066887f
https://wpscan.com/vulnerability/be55131b-d9f2-4ac1-b667-c544c066887f

Check your stack JSON