Feataholic Maz Loader
2 CVEs affecting Feataholic Maz Loader. Latest disclosed: 2021-11-23. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-24669 | High | 8.8 | 2021-11-08 | The MAZ Loader – Preloader Builder for WordPress plugin before 1.3.3 does not validate or escape the loader_id parameter of the mzldr shortcode, which allows u… |
CVE-2021-24668 | Medium | 4.3 | 2021-11-23 | The MAZ Loader WordPress plugin before 1.4.1 does not enforce nonce checks, which allows attackers to make administrators delete arbitrary loaders via a CSRF a… |