CVE-2024-11118

CVE-2024-11118 affects the WordPress 404 Error Monitor plugin up to version 1.1. It is a CSRF vulnerability caused by missing nonce validation in updatePluginSettings(), enabling unauthenticated attackers to forge requests that modify plugin settings and clear error logs if a site admin clicks a ...

WordPress 404 Error Monitor Plugin <= 1.1 is vulnerable to Cross Site Request Forgery (CSRF)

Software 404 Error Monitor Type Plugin Vulnerable versions = 1.1 Fixed in N/A OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-11118 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID f4f174f33f42 Credits Francesco Carlucci...