Files
CVEs-PoC/2021/CVE-2021-34634.md
2025-09-29 21:09:30 +02:00

779 B

CVE-2021-34634

Description

The Nifty Newsletters WordPress plugin is vulnerable to Cross-Site Request Forgery via the sola_nl_wp_head function found in the ~/sola-newsletters.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 4.0.23.

POC

Reference

No PoCs from references.

Github