CVE-2024-24706

Cross-Site Request Forgery CSRF vulnerability in Forum One WP-CFM wp-cfm.This issue affects WP-CFM: from n/a through 1.7.8...

CVE-2024-24706

CVE-2024-24706 describes a Cross-Site Request Forgery (CSRF) vulnerability in the Forum One WP-CFM plugin for WordPress (wp-cfm) affecting version 1.7.8 and earlier. The root cause is CSRF in WP-CFM that allows unauthorized actions to be performed on behalf of an authenticated user without their ...

WordPress WP-CFM Plugin <= 1.7.8 is vulnerable to Cross Site Request Forgery (CSRF)

Software WP-CFM Type Plugin Vulnerable versions = 1.7.8 Fixed in 1.7.9 OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-24706 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID af696388f906 Credits Nguyen Xuan Chien Required...