Skip to content
Sign in
5.4 Medium

CVE-2024-7690 The DN Popup WordPress plugin through 1.2.2 does not have CSRF check in place when updating its settings, which could…

Description

The DN Popup WordPress plugin through 1.2.2 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack

Affected products and versions

Product Affected versions Fixed in
DN Popup 1.2 earliest → 1.2.2 No fix stated
dn-popup 1.2 earliest → 1.2.2 No fix stated
Track this CVE