Lucene search
PRIOn knowledge basePRION:CVE-2024-0511HistoryFeb 08, 2024 - 6:15 a.m.
Cross site request forgery (csrf)
2024-02-0806:15:00
PRIOn knowledge base
www.prio-n.com
4
cross-site request forgery
wordpress plugin vulnerability
nonce validation
unauthenticated attackers
The Royal Elementor Addons and Templates plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.3.87. This is due to missing or incorrect nonce validation on the wpr_update_form_action_meta function. This makes it possible for unauthenticated attackers to post metadata via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.
| CPE | Name | Operator | Version |
|---|---|---|---|
| royal_elementor_addons | lt | 1.3.88 |
Related
nvd
nvd
CVE-2024-0511
2024-02-08 06:15:51
cvelist
cvelist
CVE-2024-0511
2024-02-08 05:33:31
cve
cve
CVE-2024-0511
2024-02-08 06:15:51
wpvulndb
wpvulndb
wordfence
wordfence