CVE-2021-4399

Edwiser Bridge <= 2.0.6 - Cross-Site Request Forgery Bypass

The Edwiser Bridge plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including,2.0.6. This is due to missing or incorrect nonce validation on the user_data_synchronization_initiater(), course_synchronization_initiater(), users_link_to_moodle_synchronization(), connection_test_initiater(), admin_menus(), and subscribe_handler() function. This makes it possible for unauthenticated attackers to perform unauthorized actions via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.

We have discovered 72 live websites that are affected by CVE-2021-4399.

Run a Free Instant Scan



Affected Software

Product  Edwiser Bridge
Category Wordpress Plugins
Vulnerable Domains72 live websites (7.24% of Edwiser Bridge install base)
Vulnerable Versions
  • from 0 through 2.0.6
Vulnerable Versions Count12 versions ( 57% of all versions)


Common Weakness Enumeration

CWE-352 Cross-Site Request Forgery (CSRF)



Details

  • Published - Jul 1, 2023
  • Updated - Apr 8, 2026

Credits

  • Jerome Bruandet (finder)

Website Distribution by Country

Number of websites using CVE-2021-4399
United States18 websites


Spain10 websites
GB7 websites
Germany6 websites
Cyprus3 websites
Australia2 websites
Brazil2 websites
Chile2 websites
France2 websites
Ireland2 websites

Website Distribution by TLD

Number of websites using CVE-2021-4399
.com27 websites
.org7 websites
.es5 websites
.co.uk4 websites
.net4 websites
.com.br2 websites
.pl2 websites
.edu1 websites
.eu1 websites
.info1 websites

Vulnerable Versions

Vulnerable versions are highlighted in red

Websites affected by CVE-2021-4399

Top websites that are affected by CVE-2021-4399. Please click on the "Contact us" link to get more information.
DomainCountryRankContacts
*****.pl Poland***,***
******.net Germany*,***,***
******.es Spain*,***,***
***********************.com GB*,***,***
***********.com United States*,***,***
************.**.uk GB*,***,***
**********.pl Poland*,***,***
**********.***.au Australia*,***,***
**********.com United States*,***,***
**********.***.au Australia*,***,***
See full domain list

FAQ

CVE-2021-4399 is Cross-Site Request Forgery (CSRF) in Edwiser Bridge
A total of 72 websites have been identified as vulnerable to CVE-2021-4399, based on global website indexing conducted by WebTechSurvey.
The Edwiser Bridge is affected by the CVE-2021-4399 vulnerability.
Edwiser Bridge versions up to and including 2.0.6 are vulnerable to CVE-2021-4399.

References