CVE-2024-3405

The WP Prayer WordPress plugin through 2.0.9 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack...

CVE-2024-3405 WP Prayer <= 2.0.9 - Settings Update via CSRF

The WP Prayer WordPress plugin through 2.0.9 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack...

CVE-2024-3405

The CVE-2024-3405 entry concerns the WordPress plugin WP Prayer, affected in versions 2.0.9 and earlier, with a CSRF flaw in the settings update workflow that could allow an authenticated attacker to trigger changes in a logged-in admin’s settings. The available connected docs confirm the issue a...

WordPress WP Prayer Plugin <= 2.0.9 is vulnerable to Cross Site Request Forgery (CSRF)

Software WP Prayer Type Plugin Vulnerable versions = 2.0.9 Fixed in N/A OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-3405 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID fe4f86d8e888 Credits Bob Matyas Required privileg...