CVE-2021-24776

WP Performance Score Booster < 2.1 - Settings Change via CSRF

The WP Performance Score Booster WordPress plugin before 2.1 does not have CSRF check when saving its settings, which could allow attackers to make a logged in admin change them via a CSRF attack.

We have discovered 2,832 live websites that are affected by CVE-2021-24776.

Run a Free Instant Scan



Affected Software

Product  Wp Performance Score Booster
Category Wordpress Plugins
Vulnerable Domains2,832 live websites (40% of Wp Performance Score Booster install base)
Vulnerable Versions
  • from 0 through 2.1
Vulnerable Versions Count13 versions ( 72% of all versions)


Common Weakness Enumeration

CWE-352 Cross-Site Request Forgery (CSRF)



Details

  • Published - Nov 17, 2021
  • Updated - Aug 3, 2024

Credits

  • apple502j

Website Distribution by Country

Number of websites using CVE-2021-24776
United States1,635 websites


Germany190 websites
GB152 websites
France89 websites
Czech Republic81 websites
Italy57 websites
Australia53 websites
Canada48 websites
Netherlands48 websites
Poland33 websites

Website Distribution by TLD

Number of websites using CVE-2021-24776
.com1,793 websites
.de108 websites
.co.uk107 websites
.net74 websites
.cz72 websites
.org63 websites
.com.au54 websites
.nl39 websites
.it38 websites
.ca31 websites

Vulnerable Versions

Vulnerable versions are highlighted in red

Websites affected by CVE-2021-24776

Top websites that are affected by CVE-2021-24776. Please click on the "Contact us" link to get more information.
DomainCountryRankContacts
**************.********.com United States***,***
************.net United States***,***
**************.com United States***,***
****************.fr France***,***
**********************.cz Czech Republic***,***
******************.com United States***,***
*********.nl Netherlands***,***
*****************.****.com United States***,***
*****.org Switzerland***,***
********.com United States***,***
See full domain list

FAQ

CVE-2021-24776 is Cross-Site Request Forgery (CSRF) in Wp Performance Score Booster
A total of 2,832 websites have been identified as vulnerable to CVE-2021-24776, based on global website indexing conducted by WebTechSurvey.
The Wp Performance Score Booster is affected by the CVE-2021-24776 vulnerability.
Wp Performance Score Booster versions up to 2.1 are vulnerable to CVE-2021-24776.
CVE-2021-24776 is resolved in version 2.1 of Wp Performance Score Booster.