3 matches found
CVE-2024-11373
creationtimestamp| type| source ---|---|--- 2025-05-20 19:42:54+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/17058...
4.3CVSS8.6AI score0.0019EPSS
SaveExploits1References1
CVE-2024-11373
The Connexion Logs WordPress plugin through 3.0.2 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack...
4.3CVSS0.0019EPSS
SaveExploits1References1
CVE-2024-11373
The Connexion Logs WordPress plugin (versions 3.0.2 and earlier ) is vulnerable to a Cross-Site Request Forgery (CSRF) attack. The root cause is a lack of CSRF checks when updating the plugin's settings. An attacker could trick a logged-in administrator into performing unauthorized actions, such ...
4.3CVSS8.4AI score0.0019EPSS
SaveExploits1References1Affected Software1
20