CVE-2024-11373

creationtimestamp| type| source ---|---|--- 2025-05-20 19:42:54+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/17058...

WordPress Connexion Logs plugin <= 3.0.2 - Log Deletion via CSRF vulnerability

Log Deletion via CSRF vulnerability discovered by Bob Matyas in WordPress Plugin Connexion Logs versions = 3.0.2...

CVE-2024-11373

The Connexion Logs WordPress plugin through 3.0.2 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack...

CVE-2024-11373

The Connexion Logs WordPress plugin (versions 3.0.2 and earlier ) is vulnerable to a Cross-Site Request Forgery (CSRF) attack. The root cause is a lack of CSRF checks when updating the plugin's settings. An attacker could trick a logged-in administrator into performing unauthorized actions, such ...