Skip to content
Sign in
4.3 Medium

CVE-2024-4082 The Joli FAQ SEO – WordPress FAQ Plugin plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions…

Description

The Joli FAQ SEO – WordPress FAQ Plugin plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.3.2. This is due to missing or incorrect nonce validation when saving settings. This makes it possible for unauthenticated attackers to change the plugin's settings via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.

Affected products and versions

Product Affected versions Fixed in
Joli FAQ SEO – WordPress FAQ Plugin 1.3 earliest → 1.3.2 No fix stated

Other CVEs of Joli FAQ SEO – WordPress FAQ Plugin

The 2 CVEs of Joli FAQ SEO – WordPress FAQ Plugin →
CVE-2022-4974 The Freemius SDK, as used by hundreds of WordPress plugin and theme developers, was vulnerable to Cross-Site Request… 6.3 Medium
Track this CVE