Skip to content
Sign in
5.3 Medium

CVE-2024-3407 The WP Prayer WordPress plugin through 2.0.9 does not have CSRF checks in some places, which could allow attackers to…

Description

The WP Prayer WordPress plugin through 2.0.9 does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks

Affected products and versions

Product Affected versions Fixed in
WP Prayer 2.0 earliest → 2.0.9 No fix stated
wp_prayer Versions not published

Other CVEs of WP Prayer

The 4 CVEs of WP Prayer →
CVE-2024-3405 The WP Prayer WordPress plugin through 2.0.9 does not have CSRF check in place when updating its settings, which could… 7.6 High CVE-2024-3406 The WP Prayer WordPress plugin through 2.0.9 does not have CSRF check in place when updating its email settings, which… 8.8 High CVE-2021-24313 The WP Prayer WordPress plugin before 1.6.2 provides the functionality to store requested prayers/praises and list… Not rated
Track this CVE