Skip to content
Sign in
4.3 Medium

CVE-2024-4382 The CB (legacy) WordPress plugin through 0.9.4.18 does not have CSRF checks in some bulk actions, which could allow…

Description

The CB (legacy) WordPress plugin through 0.9.4.18 does not have CSRF checks in some bulk actions, which could allow attackers to make logged in admins perform unwanted actions, such as deleting codes, timeframes, and bookings via CSRF attacks

Affected products and versions

Product Affected versions Fixed in
CB (legacy) 0.9 earliest → 0.9.4.18 No fix stated

Other CVEs of CB (legacy)

The 2 CVEs of CB (legacy) →
CVE-2024-4381 The CB (legacy) WordPress plugin through 0.9.4.18 does not sanitise and escape some of its settings, which could allow… 4.8 Medium
Track this CVE