CVE-2021-24688

CVE-2021-24688 is a medium-severity vulnerability affecting the Orange Form WordPress plugin up to version 1.0.1. It stems from a lack of authorization and CSRF checks in AJAX calls, allowing unauthenticated or authenticated attackers to delete arbitrary posts and potentially perform other unauthorized actions on post content. The vulnerability has a CVSS score of 4.3, indicating a network-based attack with low complexity, requiring user interaction, and resulting in low integrity impact. There is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.