Skip to content
Sign in
8.8 High

CVE-2024-3406 The WP Prayer WordPress plugin through 2.0.9 does not have CSRF check in place when updating its email settings, which…

Description

The WP Prayer WordPress plugin through 2.0.9 does not have CSRF check in place when updating its email settings, which could allow attackers to make a logged in admin change them via a CSRF attack

Affected products and versions

Product Affected versions Fixed in
WP Prayer 2.0 earliest → 2.0.9 No fix stated
wp_prayer 2.0 earliest → 2.0.9 No fix stated

Other CVEs of WP Prayer

The 4 CVEs of WP Prayer →
CVE-2024-3407 The WP Prayer WordPress plugin through 2.0.9 does not have CSRF checks in some places, which could allow attackers to… 5.3 Medium CVE-2024-3405 The WP Prayer WordPress plugin through 2.0.9 does not have CSRF check in place when updating its settings, which could… 7.6 High CVE-2021-24313 The WP Prayer WordPress plugin before 1.6.2 provides the functionality to store requested prayers/praises and list… Not rated
Track this CVE