PT-2024-16920

Name of the Vulnerable Software and Affected Versions Clickbank WordPress Plugin Storefront versions up to, and including, 1.7 Description The issue is related to Cross-Site Request Forgery due to missing or incorrect nonce validation via the cs menu page. This allows unauthenticated attackers to...

CVE-2024-11336: Cross-Site Request Forgery (CSRF)

The Clickbank WordPress Plugin Storefront plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.7. This is due to missing or incorrect nonce validation via the csmenu page. This makes it possible for unauthenticated attackers to update settings a...