Skip to content
Sign in
6.5 Medium

CVE-2024-6230 The پلاگین پرداخت دلخواه WordPress plugin through 2.9.8 does not have CSRF check in place when resetting its form…

Description

The پلاگین پرداخت دلخواه WordPress plugin through 2.9.8 does not have CSRF check in place when resetting its form fields, which could allow attackers to make a logged in admin perform such action via a CSRF attack

Affected products and versions

Product Affected versions Fixed in
پلاگین پرداخت دلخواه 2.9 earliest → 2.9.8 No fix stated

Other CVEs of پلاگین پرداخت دلخواه

The 2 CVEs of پلاگین پرداخت دلخواه →
CVE-2022-4307 The پلاگین پرداخت دلخواه WordPress plugin before 2.9.3 does not sanitise and escape some parameters, allowing… 6.1 Medium
Track this CVE