4.3
Medium
CVE-2024-4475 The WP Logs Book WordPress plugin through 1.0.1 does not have CSRF check when clearing logs, which could allow attackers…
Description
The WP Logs Book WordPress plugin through 1.0.1 does not have CSRF check when clearing logs, which could allow attackers to make a logged in admin clear the logs them via a CSRF attack
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| WP Logs Book 1.0 | earliest → 1.0.1 | No fix stated |
| wp-logs-book 1.0 | earliest → 1.0.1 | No fix stated |