4.3
Moyenne
CVE-2026-92410 The Sign-up Sheets WordPress plugin before 2.4.0 does not properly validate the CSRF nonce that protects its sign-up…
Description
The Sign-up Sheets WordPress plugin before 2.4.0 does not properly validate the CSRF nonce that protects its sign-up deletion action, allowing attackers to delete sign-up records via a forged request handled in the session of a logged-in user with the required capability.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Sign-up Sheets 2.4 | premières → < 2.4.0 | 2.4.0 |
Autres CVE de Sign-up Sheets
Les 4 CVE de Sign-up Sheets →
CVE-2024-6020
The Sign-up Sheets WordPress plugin before 2.2.13 does not escape some generated URLs, as well as the…
6.1
Moyenne
CVE-2021-24441
The Sign-up Sheets WordPress plugin before 1.0.14 does not not sanitise or validate the Sheet title when generating…
Non notée
CVE-2021-24440
The Sign-up Sheets WordPress plugin before 1.0.14 did not sanitise or escape some of its fields when creating a new…
Non notée