Aller au contenu
Se connecter
6.1 Moyenne

CVE-2024-4480 The WP Prayer II WordPress plugin through 2.4.7 does not have CSRF check in place when updating its email settings,…

Description

The WP Prayer II WordPress plugin through 2.4.7 does not have CSRF check in place when updating its email settings, which could allow attackers to make a logged in admin change them via a CSRF attack

Produits et versions touchés

Produit Versions touchées Corrigé en
WP Prayer II 2.4 premières → 2.4.7 Pas de correctif indiqué

Autres CVE de WP Prayer II

Les 2 CVE de WP Prayer II →
CVE-2024-4751 The WP Prayer II WordPress plugin through 2.4.7 does not have CSRF check in place when updating its settings, which… 4.3 Moyenne
Suivre cette CVE