7.6
Élevée
CVE-2024-3405 The WP Prayer WordPress plugin through 2.0.9 does not have CSRF check in place when updating its settings, which could…
Description
The WP Prayer WordPress plugin through 2.0.9 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| WP Prayer 2.0 | premières → 2.0.9 | Pas de correctif indiqué |
Autres CVE de WP Prayer
Les 4 CVE de WP Prayer →
CVE-2024-3407
The WP Prayer WordPress plugin through 2.0.9 does not have CSRF checks in some places, which could allow attackers to…
5.3
Moyenne
CVE-2024-3406
The WP Prayer WordPress plugin through 2.0.9 does not have CSRF check in place when updating its email settings, which…
8.8
Élevée
CVE-2021-24313
The WP Prayer WordPress plugin before 1.6.2 provides the functionality to store requested prayers/praises and list…
Non notée