CVE-2024-7892

The adstxt Plugin WordPress plugin through 1.0.0 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack...

WordPress adstxt plugin <= 1.0.0 - Settings Update via CSRF vulnerability

Settings Update via CSRF vulnerability discovered by Norbert Hofmann in WordPress Plugin adstxt versions = 1.0.0...

CVE-2024-7892

The adstxt Plugin WordPress plugin through 1.0.0 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack...

CVE-2024-7892

The adstxt Plugin WordPress plugin through 1.0.0 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack...

CVE-2024-7892 adstxt Plugin <= 1.0.0 - Settings Update via CSRF

The adstxt Plugin WordPress plugin through 1.0.0 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack...

CVE-2024-7892

The CVE-2024-7892 entry concerns the adstxt Plugin for WordPress (version

CVE-2024-7892 adstxt Plugin <= 1.0.0 - Settings Update via CSRF

The adstxt Plugin WordPress plugin through 1.0.0 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack...

WordPress adstxt Plugin <= 1.0.0 is vulnerable to Cross Site Request Forgery (CSRF)

Software adstxt Type Plugin Vulnerable versions = 1.0.0 Fixed in N/A OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-7892 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 349141bf72a5 Credits Norbert Hofmann Required...

CVE-2024-7892: Cross-Site Request Forgery (CSRF)

The adstxt Plugin WordPress plugin through 1.0.0 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack...

WordPress plugin Adstxt has a security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

PT-2024-38664 · WordPress · Adstxt Plugin

Name of the Vulnerable Software and Affected Versions: adstxt Plugin WordPress plugin version 1.0.0 Description: The issue is related to the lack of a CSRF check when updating settings in the adstxt Plugin WordPress plugin. This could allow attackers to make a logged-in admin change settings via ...