CVE-2024-51684

Cross-Site Request Forgery CSRF vulnerability in Ciprian Popescu W3P SEO wp-perfect-plugin allows Stored XSS.This issue affects W3P SEO: from n/a through 1.8.6...

CVE-2024-51684

creationtimestamp| type| source ---|---|--- 2024-11-14 20:29:32+00:00| seen| https://infosec.exchange/users/cve/statuses/113483197423323855 2024-11-14 23:21:18+00:00| seen| https://t.me/cvedetector/11008...

CVE-2024-51684

CVE-2024-51684 describes a Cross-Site Request Forgery (CSRF) vulnerability in the WordPress plugin W3P SEO by Ciprian Popescu, allowing Stored XSS. Affected: W3P SEO versions prior to 1.8.6. Impact (per sources): stored XSS potentially affecting site visitors; CVSS v3.1 base score 7.1 (HIGH) with...

CVE-2024-51684 WordPress W3P SEO plugin < 1.8.6 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in Ciprian Popescu W3P SEO wp-perfect-plugin allows Stored XSS.This issue affects W3P SEO: from n/a through 1.8.6...

WordPress W3P SEO Plugin < 1.8.6 is vulnerable to Cross Site Request Forgery (CSRF)

Software W3P SEO Type Plugin Vulnerable versions 1.8.6 Fixed in 1.8.6 OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-51684 Patch priority Low CVSS severity Low 7.1 Developer Claim ownership PSID 58f497ee049b Credits SOPROBRO Required privilege...