Lucene search

K
cvelistWPScanCVELIST:CVE-2024-6244
HistoryJul 22, 2024 - 6:00 a.m.

CVE-2024-6244 pz-frontend-manager < 1.0.6 - CSRF change user profile picture

2024-07-2206:00:06
WPScan
www.cve.org
2
cve-2024-6244
pz-frontend-manager
csrf
change user profile
wordpress plugin

EPSS

0.001

Percentile

24.6%

The PZ Frontend Manager WordPress plugin before 1.0.6 does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks

CNA Affected

[
  {
    "vendor": "Unknown",
    "product": "PZ Frontend Manager",
    "versions": [
      {
        "status": "affected",
        "versionType": "semver",
        "version": "0",
        "lessThan": "1.0.6"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

EPSS

0.001

Percentile

24.6%

Related for CVELIST:CVE-2024-6244