CVE-2024-12554: Cross-Site Request Forgery (CSRF)

The Peter’s Custom Anti-Spam plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.2.3. This is due to missing nonce validation on the casregisterpost function. This makes it possible for unauthenticated attackers to blacklist emails via a forged...

PT-2024-17651

Name of the Vulnerable Software and Affected Versions Peter’s Custom Anti-Spam plugin for WordPress versions up to, and including, 3.2.3 Description The issue is due to missing nonce validation on the cas register post function, making it possible for unauthenticated attackers to blacklist emails...