5.4
Moyenne
CVE-2024-6136 The wp-cart-for-digital-products WordPress plugin before 8.5.6 does not have CSRF checks in some places, which could…
Description
The wp-cart-for-digital-products WordPress plugin before 8.5.6 does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| wp-cart-for-digital-products 8.5 | premières → < 8.5.6 | 8.5.6 |
| wp_estore 8.5 | premières → < 8.5.6 | 8.5.6 |
Références
- wpscan.com wpscan.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de wp-cart-for-digital-products
Les 8 CVE de wp-cart-for-digital-products →
CVE-2024-6134
The wp-cart-for-digital-products WordPress plugin before 8.5.6 does not sanitise and escape a parameter before…
5.4
Moyenne
CVE-2024-6133
The wp-cart-for-digital-products WordPress plugin before 8.5.6 does not sanitise and escape a parameter before…
6.5
Moyenne
CVE-2024-6074
The wp-cart-for-digital-products WordPress plugin before 8.5.5 does not sanitise and escape a parameter before…
5.4
Moyenne
CVE-2024-6075
The wp-cart-for-digital-products WordPress plugin before 8.5.5 does not have CSRF checks in some places, which could…
8.8
Élevée