Aller au contenu
en Se connecter
6.3 Moyenne

CVE-2024-2233 The Himer WordPress theme before 2.1.1 does not have CSRF checks in some places, which could allow attackers to make…

Description

The Himer WordPress theme before 2.1.1 does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks. These include declining and accepting group invitations or leaving a group

Produits et versions touchés

Produit Versions touchées Corrigé en
Himer 2.1 premières → < 2.1.1 2.1.1
himer 2.1 premières → < 2.1.1 2.1.1

Références

Chronologie

  1. Publiée
  2. Dernière modification

Autres CVE de Himer

Les 7 CVE de Himer →
CVE-2024-2232 The lacks CSRF checks allowing a user to invite any user to any group (including private groups) 8.1 Élevée CVE-2024-2234 The Himer WordPress theme before 2.1.1 does not sanitise and escape some of its Post settings, which could allow high… 6.3 Moyenne CVE-2024-2235 The Himer WordPress theme before 2.1.1 does not have CSRF checks in some places, which could allow attackers to make… 6.3 Moyenne CVE-2024-2231 The allows any authenticated user to join a private group due to a missing authorization check on a function 6.5 Moyenne
Suivre cette CVE