8.8
High
CVE-2024-6023 The ContentLock WordPress plugin through 1.0.3 does not have CSRF check in place when adding emails, which could allow…
Description
The ContentLock WordPress plugin through 1.0.3 does not have CSRF check in place when adding emails, which could allow attackers to make a logged in admin perform such action via a CSRF attack
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| ContentLock 1.0 | earliest → 1.0.3 | No fix stated |
| contentlock 1.0 | earliest → 1.0.3 | No fix stated |