CVE-2021-24784

6.5 mediumEPSS 0.5%

Medium (6.5) in wp admin logo changer project wp admin logo changer. EPSS 0.5% chance of exploitation in the next 30 days.

The WP Admin Logo Changer WordPress plugin through 1.0 does not have CSRF check when saving its settings, which could allow attackers to make a logged in admin update them via a CSRF attack.

Severity

CVSS 3.1

6.5 medium

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

EPSS: 0.5% chance of exploitation in the next 30 days; higher than 45% of CVEs (scores of 2026-10-31)
CWE: CWE-352
Published: 2021-12-13
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

wp_admin_logo_changer_project:wp_admin_logo_changer

References

https://wpscan.com/vulnerability/2e9132b5-f8cd-4acc-839c-188d79277270
https://wpscan.com/vulnerability/2e9132b5-f8cd-4acc-839c-188d79277270

Check your stack JSON