4.3
Medium
CVE-2024-4086 The CM Tooltip Glossary – Powerful Glossary Plugin plugin for WordPress is vulnerable to Cross-Site Request Forgery in…
Description
The CM Tooltip Glossary – Powerful Glossary Plugin plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 4.2.11. This is due to missing or incorrect nonce validation when saving settings. This makes it possible for unauthenticated attackers to change the plugin's settings or reset them via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| CM Tooltip Glossary 4.2 | earliest → 4.2.11 | No fix stated |
Other CVEs of CM Tooltip Glossary
The 4 CVEs of CM Tooltip Glossary →
CVE-2024-11202
Multiple plugins for WordPress are vulnerable to Reflected Cross-Site Scripting via the cminds_free_guide shortcode in…
6.1
Medium
CVE-2024-48041
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in…
6.5
Medium
CVE-2024-43149
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in…
6.5
Medium