CVE-2021-24446

The Remove Footer Credit plugin before version 1.0.11 contained a cross-site request forgery vulnerability in its settings save functionality that could be exploited to modify plugin configuration without proper verification. Additionally, the plugin failed to properly sanitize user input when storing settings, creating an authenticated stored cross-site scripting vulnerability that allowed attackers with admin access to inject malicious code.

Based on public CVE data (MITRE/NVD).