Skip to content
Sign in
5.5 Medium

CVE-2024-3824 The Base64 Encoder/Decoder WordPress plugin through 0.9.2 does not have CSRF check in place when resetting its settings,…

Description

The Base64 Encoder/Decoder WordPress plugin through 0.9.2 does not have CSRF check in place when resetting its settings, which could allow attackers to make a logged in admin reset them via a CSRF attack

Affected products and versions

Product Affected versions Fixed in
Base64 Encoder/Decoder 0.9 earliest → 0.9.2 No fix stated

Other CVEs of Base64 Encoder/Decoder

The 3 CVEs of Base64 Encoder/Decoder →
CVE-2024-3823 The Base64 Encoder/Decoder WordPress plugin through 0.9.2 does not have CSRF check when updating its settings, and is… 2.4 Low CVE-2024-3822 The Base64 Encoder/Decoder WordPress plugin through 0.9.2 does not sanitise and escape a parameter before outputting… 4.8 Medium
Track this CVE