CVE-2024-2739 Advance Search <= 1.1.6 - Shortcode Deletion via CSRF

The Advanced Search WordPress plugin through 1.1.6 does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks...

CVE-2024-2739 Advance Search <= 1.1.6 - Shortcode Deletion via CSRF

The Advanced Search WordPress plugin through 1.1.6 does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks...

CVE-2024-2739

The CVE-2024-2739 entry concerns the WordPress plugin Advanced Search (older than or equal to 1.1.6), which lacks CSRF protections in certain areas. This absence could allow an attacker to coerce logged-in users into performing unintended actions via CSRF. The available connected documents reiter...

WordPress Advanced Search Plugin <= 1.1.6 is vulnerable to Cross Site Request Forgery (CSRF)

Software Advanced Search Type Plugin Vulnerable versions = 1.1.6 Fixed in N/A OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-2739 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 0457315bdef4 Credits Bob Matyas Required...