Skip to content
Sign in
6.1 Medium

CVE-2024-4480 The WP Prayer II WordPress plugin through 2.4.7 does not have CSRF check in place when updating its email settings,…

Description

The WP Prayer II WordPress plugin through 2.4.7 does not have CSRF check in place when updating its email settings, which could allow attackers to make a logged in admin change them via a CSRF attack

Affected products and versions

Product Affected versions Fixed in
WP Prayer II 2.4 earliest → 2.4.7 No fix stated

Other CVEs of WP Prayer II

The 2 CVEs of WP Prayer II →
CVE-2024-4751 The WP Prayer II WordPress plugin through 2.4.7 does not have CSRF check in place when updating its settings, which… 4.3 Medium
Track this CVE