4.1
Medium
CVE-2024-9689 The Post From Frontend WordPress plugin through 1.0.0 does not have CSRF check when deleting posts, which could allow…
Description
The Post From Frontend WordPress plugin through 1.0.0 does not have CSRF check when deleting posts, which could allow attackers to make logged in admin perform such action via a CSRF attack
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Post From Frontend 1.0 | earliest → 1.0.0 | No fix stated |
| post_from_frontend 1.0 | earliest → 1.0.0 | No fix stated |