CVE-2021-24668: Feataholic Maz Loader

Medium severity, CVSS 4.3. EPSS: 0.5% chance of exploitation in the next 30 days.

The MAZ Loader WordPress plugin before 1.4.1 does not enforce nonce checks, which allows attackers to make administrators delete arbitrary loaders via a CSRF attack

Affected products

• Feataholic Maz Loader: before 1.4.1 (fixed in 1.4.1)

Published 2021-11-23. Last modified 2026-06-17.