Lucene search

K
nvd[email protected]NVD:CVE-2024-3405
HistoryMay 15, 2024 - 6:15 a.m.

CVE-2024-3405

2024-05-1506:15:09
web.nvd.nist.gov
2
wp prayer
plugin
csrf
vulnerability
wordpress
attack
settings
admin

AI Score

6.4

Confidence

High

EPSS

0

Percentile

9.0%

The WP Prayer WordPress plugin through 2.0.9 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack

AI Score

6.4

Confidence

High

EPSS

0

Percentile

9.0%