4.3
Medium
CVE-2024-12280 The WP Customer Area WordPress plugin through 8.2.4 does not have CSRF check in place when deleting its logs, which…
Description
The WP Customer Area WordPress plugin through 8.2.4 does not have CSRF check in place when deleting its logs, which could allow attackers to make a logged in to delete them via a CSRF attack
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| WP Customer Area 8.2 | earliest → 8.2.4 | No fix stated |
Other CVEs of WP Customer Area
The 5 CVEs of WP Customer Area →
CVE-2024-12436
The WP Customer Area WordPress plugin through 8.2.4 does not have CSRF checks in some places, which could allow…
4.3
Medium
CVE-2023-6824
The WP Customer Area WordPress plugin before 8.2.1 does not properly validates user capabilities in some of its AJAX…
6.5
Medium
CVE-2023-6741
The WP Customer Area WordPress plugin before 8.2.1 does not properly validate users capabilities in some of its AJAX…
4.3
Medium
CVE-2022-4745
The WP Customer Area WordPress plugin before 8.1.4 does not have CSRF checks when performing some actions such as chmod,…
6.1
Medium