Lucene search
HistoryJun 14, 2024 - 6:15 a.m.
CVE-2024-3966
pray for me wordpress plugin
cross-site scripting
unauthenticated visitors
0.0004 Low
EPSS
Percentile
9.1%
The Pray For Me WordPress plugin through 1.0.4 does not sanitise and escape some parameters, which could unauthenticated visitors to perform Cross-Site Scripting attacks that trigger when an admin visits the Prayer Requests in the WP Admin
Related
cvelist
cvelist
CVE-2024-3966 Pray For Me <= 1.0.4 - Unauthenticated Stored XSS
2024-06-14 06:00:02
wpexploit
wpexploit
Pray For Me <= 1.0.4 - Unauthenticated Stored XSS
2024-05-24 00:00:00
vulnrichment
vulnrichment
CVE-2024-3966 Pray For Me <= 1.0.4 - Unauthenticated Stored XSS
2024-06-14 06:00:02
cve
cve
CVE-2024-3966
2024-06-14 06:15:12
wpvulndb
wpvulndb
Pray For Me <= 1.0.4 - Unauthenticated Stored XSS
2024-05-24 00:00:00
wordfence
wordfence