Aller au contenu
Se connecter
5.4 Moyenne

CVE-2024-1306 The Smart Forms WordPress plugin before 2.6.94 does not have CSRF checks in some places, which could allow attackers to…

Description

The Smart Forms WordPress plugin before 2.6.94 does not have CSRF checks in some places, which could allow attackers to make logged-in users perform unwanted actions via CSRF attacks, such as editing entries, and we consider it a medium risk.

Produits et versions touchés

Produit Versions touchées Corrigé en
smart_forms 2.6 premières → < 2.6.94 2.6.94
Smart Forms 2.6 premières → < 2.6.94 2.6.94

Autres CVE de smart_forms

Les 3 CVE de smart_forms →
CVE-2024-1307 The Smart Forms WordPress plugin before 2.6.94 does not have proper authorization in some actions, which could allow… 6.5 Moyenne CVE-2023-7203 The Smart Forms WordPress plugin before 2.6.87 does not have authorisation in various AJAX actions, which could allow… 6.1 Moyenne
Suivre cette CVE