CVE-2021-24472

CRITICAL NUCLEI

QT KenthaRadio < 2.0.2 and OnAir2 < 3.9.9.2 - Unauthenticated Server-Side Request Forgery via Proxy Functionality

Title source: llm
STIX 2.1

Exploitation Summary

CVE-2021-24472 has a Nuclei detection template available — see the Nuclei card below for the Shodan/FOFA recon queries.

Description

The OnAir2 WordPress theme before 3.9.9.2 and QT KenthaRadio WordPress plugin before 2.0.2 have exposed proxy functionality to unauthenticated users, sending requests to this proxy functionality will have the web server fetch and display the content from any URI, this would allow for SSRF (Server Side Request Forgery) and RFI (Remote File Inclusion) vulnerabilities on the website.

Nuclei Templates (1)

Onair2 < 3.9.9.2 & KenthaRadio < 2.0.2 - Remote File Inclusion/Server-Side Request Forgery
CRITICALVERIFIEDby Suman_Kar
Shodan: http.html:/wp-content/plugins/qt-kentharadio
FOFA: body=/wp-content/plugins/qt-kentharadio

References (1)

Core 1
Core References
Exploit, Third Party Advisory x_refsource_misc
https://wpscan.com/vulnerability/17591ac5-88fa-4cae-a61a-4dcf5dc0b72a

Scores

CVSS v3 9.8
EPSS 0.5661
EPSS Percentile 98.9%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-918
Status published
Products (2)
qantumthemes/kentharadio < 2.0.2
qantumthemes/onair2 < 3.9.9.2
Published Aug 02, 2021
Tracked Since Feb 18, 2026