CVE-2024-3407

May 15, 2024, 4:40 p.m.

Awaiting Analysis
CVE has been recently published to the CVE List and has been received by the NVD.

Products

WP Prayer WordPress plugin

  • through 2.0.9

Source

contact@wpscan.com

Tags

CVE-2024-3407 details

Published : May 15, 2024, 6:15 a.m.
Last Modified : May 15, 2024, 4:40 p.m.

Description

The WP Prayer WordPress plugin through 2.0.9 does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks

CVSS Score

1 2 3 4 5 6 7 8 9 10

Weakness

Weakness Name Description
This website uses the NVD API, but is not approved or certified by it.