5.9
Medium
CVE-2024-3472 The Modal Window WordPress plugin before 5.3.10 does not have CSRF check in place when bulk deleting modals, which…
Description
The Modal Window WordPress plugin before 5.3.10 does not have CSRF check in place when bulk deleting modals, which could allow attackers to make a logged in admin delete them via a CSRF attack
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Modal Window 5.3 | earliest → < 5.3.10 | 5.3.10 |
| Modal_window | Versions not published |