7.6
High
CVE-2024-4758 The Muslim Prayer Time BD WordPress plugin through 2.4 does not have CSRF check in place when reseting its settings,…
Description
The Muslim Prayer Time BD WordPress plugin through 2.4 does not have CSRF check in place when reseting its settings, which could allow attackers to make a logged in admin reset them via a CSRF attack
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Muslim Prayer Time BD 2.4 | earliest → 2.4 | No fix stated |
| muslim_prayer_time_bd 2.4 | earliest → 2.4 | No fix stated |