blogsafe.org My Downloads

BlogSafe.org

WordPress CVEs

Search and review WordPress-related vulnerability records.

← Back to CVE list

CVE-2021-24636

HIGH 8.1 CVSS 3.1
Published
September 20, 2021
Last modified
June 17, 2026
NVD status
Modified
Reported by
contact@wpscan.com
Weakness
CWE-352
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H

Description

The Print My Blog WordPress Plugin before 3.4.2 does not enforce nonce (CSRF) checks, which allows attackers to make logged in administrators deactivate the Print My Blog plugin and delete all saved data for that plugin by tricking them to open a malicious link

Affected WordPress components

  • Print My Blog – Print, PDF, & eBook Converter WordPress Plugin Plugin · print-my-blog
    Confirmed match Active
    From 3.4.2 (including) to 3.4.2 (excluding)
    View on WordPress.org

A confirmed match is backed by the plugin or theme slug. A possible match is based on the product name only and should be verified.

Affected products and versions

  • Unknown Print My Blog – Print, PDF, & eBook Converter WordPress Plugin — From 3.4.2 (including) to 3.4.2 (excluding)
  • print_my_blog_project print_my_blog — Before 3.4.2

References

  • wpscan.com https://wpscan.com/vulnerability/db8ace7b-7a44-4620-9fe8-ddf0ad520f5e Exploit, Third Party Advisory
  • nvd.nist.gov Official NVD record