https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-09T16:38:37.101758+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2021-24823 CVE-2021-24823 — Support Board < 3.3.6 - Arbitrary File Deletion via CSRF 2026-10-09T16:38:37.102851+00:00

Affected: Unknown Support Board

The Support Board WordPress plugin before 3.3.6 does not have any CSRF checks in actions handled by the include/ajax.php file, which could allow attackers to make logged in users do unwanted actions. For example, make an admin delete arbitrary files