CVE-2024-6412 HTML Forms – Simple WordPress Forms Plugin < 1.3.34 - Bulk Delete via CSRF

2024-07-3106:00:04

WPScan

www.cve.org

cve-2024-6412

html forms

wordpress plugin

csrf

csrf checks

unwanted actions

EPSS

Percentile

9.4%

JSON

The HTML Forms WordPress plugin before 1.3.34 does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks

CNA Affected

[
  {
    "vendor": "Unknown",
    "product": "HTML Forms",
    "versions": [
      {
        "status": "affected",
        "versionType": "semver",
        "version": "0",
        "lessThan": "1.3.34"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

References

wpscan.com/vulnerability/9eb0dad6-3c19-4fe4-a20d-d45b51410444/

EPSS

Percentile

9.4%

JSON

Related for CVELIST:CVE-2024-6412