Skip to content
Sign in
6.3 Medium

CVE-2024-2040 The Himer WordPress theme before 2.1.1 does not have CSRF checks in some places, which could allow attackers to make…

Description

The Himer WordPress theme before 2.1.1 does not have CSRF checks in some places, which could allow attackers to make users join private groups via a CSRF attack

Affected products and versions

Product Affected versions Fixed in
Himer 2.1 earliest → < 2.1.1 2.1.1
himer 2.1 earliest → < 2.1.1 2.1.1

Other CVEs of Himer

The 7 CVEs of Himer →
CVE-2024-2232 The lacks CSRF checks allowing a user to invite any user to any group (including private groups) 8.1 High CVE-2024-2233 The Himer WordPress theme before 2.1.1 does not have CSRF checks in some places, which could allow attackers to make… 6.3 Medium CVE-2024-2234 The Himer WordPress theme before 2.1.1 does not sanitise and escape some of its Post settings, which could allow high… 6.3 Medium CVE-2024-2235 The Himer WordPress theme before 2.1.1 does not have CSRF checks in some places, which could allow attackers to make… 6.3 Medium
Track this CVE