4.3
Medium
CVE-2026-92410 The Sign-up Sheets WordPress plugin before 2.4.0 does not properly validate the CSRF nonce that protects its sign-up…
Description
The Sign-up Sheets WordPress plugin before 2.4.0 does not properly validate the CSRF nonce that protects its sign-up deletion action, allowing attackers to delete sign-up records via a forged request handled in the session of a logged-in user with the required capability.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Sign-up Sheets 2.4 | earliest → < 2.4.0 | 2.4.0 |
Other CVEs of Sign-up Sheets
The 4 CVEs of Sign-up Sheets →
CVE-2024-6020
The Sign-up Sheets WordPress plugin before 2.2.13 does not escape some generated URLs, as well as the…
6.1
Medium
CVE-2021-24441
The Sign-up Sheets WordPress plugin before 1.0.14 does not not sanitise or validate the Sheet title when generating…
Not rated
CVE-2021-24440
The Sign-up Sheets WordPress plugin before 1.0.14 did not sanitise or escape some of its fields when creating a new…
Not rated