CVE-2021-4411

Summary

CVE-2021-4411: A vulnerability affects the WP EasyPay – Square for WordPress plugin, impacting versions up to 3.2.0. The issue stems from insufficient nonce validation on the wpep_download_transaction_in_excel() function. This security flaw exposes sites to Cross-Site Request Forgery (CSRF) attacks. Attackers can force administrators to download transactions data by tricking them into clicking on malicious links, potentially leading to data theft or other unauthorized actions.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.