Skip to content
Sign in
6.1 Medium

CVE-2024-4534 The KKProgressbar2 Free WordPress plugin through 1.1.4.2 does not have CSRF check in some places, and is missing…

Description

The KKProgressbar2 Free WordPress plugin through 1.1.4.2 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add Stored XSS payloads via a CSRF attack

Affected products and versions

Product Affected versions Fixed in
KKProgressbar2 Free 1.1 earliest → 1.1.4.2 No fix stated
kkprogressbar2_free 1.1 earliest → 1.1.4.2 No fix stated

Other CVEs of KKProgressbar2 Free

The 3 CVEs of KKProgressbar2 Free →
CVE-2024-4533 The KKProgressbar2 Free WordPress plugin through 1.1.4.2 does not sanitize and escape a parameter before using it in… 6.5 Medium CVE-2024-4535 The KKProgressbar2 Free WordPress plugin through 1.1.4.2 does not have CSRF checks in some places, which could allow… 8.8 High
Track this CVE