CVE-2021-43353

The Crisp Live Chat WordPress plugin is vulnerable to Cross-Site Request Forgery due to missing nonce validation via the crisp_plugin_settings_page function found in the ~/crisp.php file, which made it possible for attackers to inject arbitrary web scripts in versions up to, and including 0.31.

• CWE-352
• CWE-352

• https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2643954%40crisp&new=2643954%40crisp&sfp_email=&sfph_mail=Issue Tracking, Patch, Third Party Advisory
• https://www.wordfence.com/vulnerability-advisories/#CVE-2021-43353Third Party Advisory
• https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2643954%40crisp&new=2643954%40crisp&sfp_email=&sfph_mail=Issue Tracking, Patch, Third Party Advisory
• https://www.wordfence.com/vulnerability-advisories/#CVE-2021-43353Third Party Advisory

Published

Jan 18, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-43338Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2021-43339In Ericsson Network Location before 2021-07-31, it is possib…8.8
• CVE-2021-4334The Fancy Product Designer plugin for WordPress is vulnerabl…8.8
• CVE-2021-4335The Fancy Product Designer plugin for WordPress is vulnerabl…6.3
• CVE-2021-43350An unauthenticated Apache Traffic Control Traffic Ops user c…9.8
• CVE-2021-43351Rejected reason: This is unused.
• CVE-2021-43355Fresenius Kabi Vigilant Software Suite (Mastermed Dashboard)…9.8
• CVE-2021-43358Sunnet eHRD has inadequate filtering for special characters …7.5
• CVE-2021-43359Sunnet eHRD has broken access control vulnerability, which a…8.8
• CVE-2021-4336A vulnerability was found in ITRS Group monitor-ninja up to …9.8
• CVE-2021-43360Sunnet eHRD e-mail delivery task schedule’s serialization fu…8.8
• CVE-2021-43361Improper Neutralization of Special Elements used in an SQL C…9.8