CVE-2024-12386

creationtimestamp| type| source ---|---|--- 2025-02-12 11:21:27+00:00| seen| https://infosec.exchange/users/cve/statuses/113990650248896980 2025-02-12 12:15:56+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhy5no5smj2a 2025-02-12 13:11:31+00:00| seen|...

CVE-2024-12386

The CVE-2024-12386 entry concerns the WP Abstracts WordPress plugin (prevalent versions up to 2.7.3) and documents a Cross-Site Request Forgery (CSRF) flaw caused by missing nonce validation in multiple functions. Exploitation requires an administrator to perform an action (e.g., click a forged l...