CVE-2021-4373: Better Search <= 2.5.2 - Cross-Site Request Forgery to Settings Import
The Better Search plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.5.2. This makes it possible for unauthenticated attackers to import settings via forged request granted they can trick a site administrator into performing an action such as clicking on a link.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is CVE-2021-4373?
CVE-2021-4373 refers to a vulnerability in the Better Search plugin for WordPress up to and including version 2.5.2, which allows unauthenticated attackers to import settings via forged requests.
What is the severity of CVE-2021-4373?
CVE-2021-4373 has a severity rating of 4.3 (high).
How does CVE-2021-4373 affect the Better Search plugin for WordPress?
CVE-2021-4373 affects the Better Search plugin for WordPress up to and including version 2.5.2, allowing unauthenticated attackers to perform actions by tricking site administrators into clicking on forged requests.
How can an attacker exploit CVE-2021-4373?
An attacker can exploit CVE-2021-4373 by tricking a site administrator into performing an action, such as clicking on a forged request, which allows them to import settings.
Is CVE-2021-4373 fixed in the latest version of the Better Search plugin for WordPress?
Yes, CVE-2021-4373 is fixed in versions of the Better Search plugin for WordPress higher than 2.5.2.