4.3
Medium
CVE-2024-5808 The WP Ajax Contact Form WordPress plugin through 2.2.2 does not have CSRF check in place when deleting emails from…
Description
The WP Ajax Contact Form WordPress plugin through 2.2.2 does not have CSRF check in place when deleting emails from the email list, which could allow attackers to make a logged in admin perform such action via a CSRF attack
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| WP Ajax Contact Form 2.2 | earliest → 2.2.2 | No fix stated |
| ajax_contact_form 2.2 | earliest → 2.2.2 | No fix stated |