Aller au contenu
Se connecter
8.8 Élevée

CVE-2024-3406 The WP Prayer WordPress plugin through 2.0.9 does not have CSRF check in place when updating its email settings, which…

Description

The WP Prayer WordPress plugin through 2.0.9 does not have CSRF check in place when updating its email settings, which could allow attackers to make a logged in admin change them via a CSRF attack

Produits et versions touchés

Produit Versions touchées Corrigé en
WP Prayer 2.0 premières → 2.0.9 Pas de correctif indiqué
wp_prayer 2.0 premières → 2.0.9 Pas de correctif indiqué

Autres CVE de WP Prayer

Les 4 CVE de WP Prayer →
CVE-2024-3407 The WP Prayer WordPress plugin through 2.0.9 does not have CSRF checks in some places, which could allow attackers to… 5.3 Moyenne CVE-2024-3405 The WP Prayer WordPress plugin through 2.0.9 does not have CSRF check in place when updating its settings, which could… 7.6 Élevée CVE-2021-24313 The WP Prayer WordPress plugin before 1.6.2 provides the functionality to store requested prayers/praises and list… Non notée
Suivre cette CVE