Live Vulnerability Intelligence
Threat Database
Search CVEs, inspect descriptions, and open detail pages with AI-assisted technical context.
Threat Entry
Updated 2024-11-21
CVE-2021-24668 - Maz Loader Plugin
The MAZ Loader WordPress plugin before 1.4.1 does not enforce nonce checks, which allows attackers to make administrators delete arbitrary loaders via a CSRF attack
PLUGIN
Maz Loader
CVE-2021-24668
Risk Score
Threat Entry
Updated 2024-11-21
CVE-2021-24669 - Maz Loader Plugin
The MAZ Loader – Preloader Builder for WordPress plugin before 1.3.3 does not validate or escape the loader_id parameter of the mzldr shortcode, which allows users with a role as low as Contributor to perform SQL injection.
PLUGIN
Maz Loader
CVE-2021-24669
Risk Score