Skip to content
Sign in
8.8 High

CVE-2024-6022 The ContentLock WordPress plugin through 1.0.3 does not have CSRF check in place when updating its settings, which could…

Description

The ContentLock WordPress plugin through 1.0.3 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack

Affected products and versions

Product Affected versions Fixed in
ContentLock 1.0 earliest → 1.0.3 No fix stated
contentlock 1.0 earliest → 1.0.3 No fix stated

Other CVEs of ContentLock

The 3 CVEs of ContentLock →
CVE-2024-6024 The ContentLock WordPress plugin through 1.0.3 does not have CSRF check in place when deleting groups or emails, which… 8.8 High CVE-2024-6023 The ContentLock WordPress plugin through 1.0.3 does not have CSRF check in place when adding emails, which could allow… 8.8 High
Track this CVE