CVE-2024-12634

creationtimestamp| type| source ---|---|--- 2025-03-07 11:34:46+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/6827 2025-03-07 14:05:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ljs6hull3k2a 2025-03-07 14:57:03+00:00| seen| https://t.me/cvedetector/19826 2025-03-08...

CVE-2024-12634 Related Posts, Inline Related Posts, Contextual Related Posts, Related Content By PickPlugins <= 2.0.59 - Cross-Site Request Forgery to Stored Cross-Site Scripting

The Related Posts, Inline Related Posts, Contextual Related Posts, Related Content By PickPlugins plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including 2.0.59. This is due to missing nonce validation on a function. This makes it possible for...