WordPress security by component

OnAir2

Theme description

OnAir2 is a WordPress component with 1 published CVE record in this archive. The latest tracked vulnerability was published Aug 02, 2021; the highest CVE/CNA score is 9.8.

Theme slug: kentharadio

Latest vulnerability

CVE-2021-24472: OnAir2: Server-side request forgery

OnAir2 is affected by server-side request forgery. The vulnerable path is reachable without authentication. The vulnerable server can be induced to make attacker-selected network requests.

PublishedAug 02, 2021

Safe version guidanceSee mitigation notes

		Safe version
Aug 02, 2021	CVE-2021-24472 OnAir2: Server-side request forgery OnAir2 is affected by server-side request forgery. The vulnerable path is reachable without authentication. The vulnerable server can be induced to make attacker-selected network requests.	See mitigation notes	CVE9.8 NVD9.8