CVE-2024-29009

The easy-popup-show WordPress plugin is vulnerable to a Cross-Site Request Forgery (CSRF) (CWE-352) across all versions . The root cause is missing or incorrect nonce validation on an unknown function. This allows a remote unauthenticated attacker to trick a site administrator into viewing a mali...

CVE-2024-29009

Cross-site request forgery CSRF vulnerability in easy-popup-show all versions allows a remote unauthenticated attacker to hijack the authentication of the administrator and to perform unintended operations if the administrator views a malicious page while logged in...