Lucene search
+L

5 matches found

OSV
OSV
•added 2024/04/15 5:15 a.m.•12 views

CVE-2024-1755

The NPS computy WordPress plugin through 2.7.5 does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks...

8.8CVSS5.8AI score0.00365EPSS
SaveExploits2References1
NVD
NVD
•added 2024/04/15 5:15 a.m.•30 views

CVE-2024-1755

The NPS computy WordPress plugin through 2.7.5 does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks...

8.8CVSS6.5AI score0.00365EPSS
SaveExploits2References1
Vulnrichment
Vulnrichment
•added 2024/04/15 5:00 a.m.•16 views

CVE-2024-1755 NPS computy <= 2.7.5 - Results Deletion via CSRF

The NPS computy WordPress plugin through 2.7.5 does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks...

6.8AI score0.00365EPSS
SaveExploits2References1
CVE
CVE
•added 2024/04/15 5:00 a.m.•125 views

CVE-2024-1755

The NPS computy WordPress plugin through 2.7.5 does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks...

9.2AI score0.00365EPSS
SaveExploits2References1Affected Software1
Patchstack
Patchstack
•added 2024/04/15 12:00 a.m.•22 views

WordPress NPS computy Plugin < 2.7.6 is vulnerable to Cross Site Request Forgery (CSRF)

Software NPS computy Type Plugin Vulnerable versions 2.7.6 Fixed in 2.7.6 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-1755 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID f3b2b0b2003c Credits Bob Matyas Required...

8.8CVSS6.6AI score0.00365EPSS
SaveExploits2References4Affected Software1
Rows per page
Query Builder