CVE-2024-1755

The NPS computy WordPress plugin through 2.7.5 does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks...

CVE-2024-1755

The NPS computy WordPress plugin through 2.7.5 does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks...

CVE-2024-1755 NPS computy <= 2.7.5 - Results Deletion via CSRF

The NPS computy WordPress plugin through 2.7.5 does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks...

CVE-2024-1755

The NPS computy WordPress plugin (versions 2.7.5 and earlier ) is vulnerable to Cross-Site Request Forgery (CSRF) due to a lack of CSRF checks in certain areas. This flaw could allow an attacker to trick a logged-in user into performing unwanted actions, specifically including results deletion . ...

WordPress NPS computy Plugin < 2.7.6 is vulnerable to Cross Site Request Forgery (CSRF)

Software NPS computy Type Plugin Vulnerable versions 2.7.6 Fixed in 2.7.6 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-1755 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID f3b2b0b2003c Credits Bob Matyas Required...