{
  "@rdf:about": "https://jvndb.jvn.jp/en/contents/2021/JVNDB-2021-000065.html",
  "dc:date": "2021-07-08T14:29+09:00",
  "dcterms:issued": "2021-07-08T14:29+09:00",
  "dcterms:modified": "2021-07-08T14:29+09:00",
  "description": "WordPress Plugin \"WordPress Meta Data Filter \u0026 Taxonomies Filter\" provided by realmag777 contains a cross-site request forgery vulnerability (CWE-352).\r\n\r\nRyoma Nishioka of Cryptography Laboratory, Department of Information and Communication Engineering, Tokyo Denki University reported this vulnerability to the developer and coordinated on his own.\r\nAfter coordination was completed, this case was reported to IPA, and JPCERT/CC coordinated with the developer for the publication under Information Security Early Warning Partnership.",
  "link": "https://jvndb.jvn.jp/en/contents/2021/JVNDB-2021-000065.html",
  "sec:cpe": {
    "#text": "cpe:/a:misc:realmag777_wordpress_meta_data_and_taxonomies_filter",
    "@product": "WordPress Meta Data Filter \u0026 Taxonomies Filter",
    "@vendor": "realmag777",
    "@version": "2.2"
  },
  "sec:cvss": [
    {
      "@score": "2.6",
      "@severity": "Low",
      "@type": "Base",
      "@vector": "AV:N/AC:H/Au:N/C:N/I:P/A:N",
      "@version": "2.0"
    },
    {
      "@score": "4.3",
      "@severity": "Medium",
      "@type": "Base",
      "@vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
      "@version": "3.0"
    }
  ],
  "sec:identifier": "JVNDB-2021-000065",
  "sec:references": [
    {
      "#text": "https://jvn.jp/en/jp/JVN48413554/index.html",
      "@id": "JVN#48413554",
      "@source": "JVN"
    },
    {
      "#text": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-20781",
      "@id": "CVE-2021-20781",
      "@source": "CVE"
    },
    {
      "#text": "https://nvd.nist.gov/vuln/detail/CVE-2021-20781",
      "@id": "CVE-2021-20781",
      "@source": "NVD"
    },
    {
      "#text": "https://www.ipa.go.jp/en/security/vulnerabilities/cwe.html",
      "@id": "CWE-352",
      "@title": "Cross-Site Request Forgery(CWE-352)"
    }
  ],
  "title": "WordPress Plugin \"WordPress Meta Data Filter \u0026 Taxonomies Filter\" vulnerable to cross-site request forgery"
}

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T17:53:22.558Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://wp-filter.com/update-v-2-2-8-v-1-2-8/"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://wp-filter.com/"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://jvn.jp/en/jp/JVN48413554/index.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "WordPress Meta Data Filter \u0026 Taxonomies Filter",
          "vendor": "realmag777",
          "versions": [
            {
              "status": "affected",
              "version": "versions prior to v.1.2.8 and versions prior to v.2.2.8"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Cross-site request forgery (CSRF) vulnerability in WordPress Meta Data Filter \u0026 Taxonomies Filter versions prior to v.1.2.8 and versions prior to v.2.2.8 allows remote attackers to hijack the authentication of administrators via unspecified vectors."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Cross-site request forgery",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2021-07-14T01:20:26",
        "orgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
        "shortName": "jpcert"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://wp-filter.com/update-v-2-2-8-v-1-2-8/"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://wp-filter.com/"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://jvn.jp/en/jp/JVN48413554/index.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "vultures@jpcert.or.jp",
          "ID": "CVE-2021-20781",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "WordPress Meta Data Filter \u0026 Taxonomies Filter",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "versions prior to v.1.2.8 and versions prior to v.2.2.8"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "realmag777"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Cross-site request forgery (CSRF) vulnerability in WordPress Meta Data Filter \u0026 Taxonomies Filter versions prior to v.1.2.8 and versions prior to v.2.2.8 allows remote attackers to hijack the authentication of administrators via unspecified vectors."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Cross-site request forgery"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://wp-filter.com/update-v-2-2-8-v-1-2-8/",
              "refsource": "MISC",
              "url": "https://wp-filter.com/update-v-2-2-8-v-1-2-8/"
            },
            {
              "name": "https://wp-filter.com/",
              "refsource": "MISC",
              "url": "https://wp-filter.com/"
            },
            {
              "name": "https://jvn.jp/en/jp/JVN48413554/index.html",
              "refsource": "MISC",
              "url": "https://jvn.jp/en/jp/JVN48413554/index.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
    "assignerShortName": "jpcert",
    "cveId": "CVE-2021-20781",
    "datePublished": "2021-07-14T01:20:26",
    "dateReserved": "2020-12-17T00:00:00",
    "dateUpdated": "2024-08-03T17:53:22.558Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}