Aller au contenu
Se connecter
4.7 Moyenne

CVE-2024-2262 Themify WordPress plugin before 1.4.4 does not have CSRF check in its bulk action, which could allow attackers to…

Description

Themify WordPress plugin before 1.4.4 does not have CSRF check in its bulk action, which could allow attackers to make logged in users delete arbitrary filters via CSRF attack, granted they know the related filter slugs

Produits et versions touchés

Produit Versions touchées Corrigé en
Themify 1.4 premières → < 1.4.4 1.4.4
woocommerce_product_filter 1.4 premières → < 1.4.4 1.4.4

Autres CVE de Themify

Les 3 CVE de Themify →
CVE-2024-2278 Themify WordPress plugin before 1.4.4 does not sanitise and escape some of its Filters settings, which could allow high… 6.1 Moyenne CVE-2024-2263 Themify WordPress plugin before 1.4.4 does not sanitise and escape a parameter before outputting it back in the page,… 4.8 Moyenne
Suivre cette CVE