← Database

CVE-2021-36914

MEDIUM CVSS: 6.1 Published: 2022-04-12 Modified: 2026-06-17

Description

Cross-Site Request Forgery (CSRF) vulnerability leading to Reflected Cross-Site Scripting (XSS) in CalderaWP License Manager (WordPress plugin) <= 1.2.11.

Affected Platforms

Claderaform Calderawp License Manager

Weakness Type

CWE-79, CWE-352, CWE-352

References