6.3
Moyenne
CVE-2024-2040 The Himer WordPress theme before 2.1.1 does not have CSRF checks in some places, which could allow attackers to make…
Description
The Himer WordPress theme before 2.1.1 does not have CSRF checks in some places, which could allow attackers to make users join private groups via a CSRF attack
Produits et versions touchés
Autres CVE de Himer
Les 7 CVE de Himer →
CVE-2024-2232
The lacks CSRF checks allowing a user to invite any user to any group (including private groups)
8.1
Élevée
CVE-2024-2233
The Himer WordPress theme before 2.1.1 does not have CSRF checks in some places, which could allow attackers to make…
6.3
Moyenne
CVE-2024-2234
The Himer WordPress theme before 2.1.1 does not sanitise and escape some of its Post settings, which could allow high…
6.3
Moyenne
CVE-2024-2235
The Himer WordPress theme before 2.1.1 does not have CSRF checks in some places, which could allow attackers to make…
6.3
Moyenne