Skip to content
Sign in
6.1 Medium

CVE-2024-3966 The Pray For Me WordPress plugin through 1.0.4 does not sanitise and escape some parameters, which could unauthenticated…

Description

The Pray For Me WordPress plugin through 1.0.4 does not sanitise and escape some parameters, which could unauthenticated visitors to perform Cross-Site Scripting attacks that trigger when an admin visits the Prayer Requests in the WP Admin

Affected products and versions

Product Affected versions Fixed in
Pray For Me 1.0 earliest → 1.0.4 No fix stated

Other CVEs of Pray For Me

The 2 CVEs of Pray For Me →
CVE-2024-3965 The Pray For Me WordPress plugin through 1.0.4 does not have CSRF check in place when updating its settings, which could… 5.4 Medium
Track this CVE