CVE-2024-3474

CVE-2024-3474 concerns the WordPress plugin Wow Skype Buttons (versions before 4.0.4). The issue is a CSRF vulnerability in certain bulk actions that can let an authenticated, logged-in admin perform unauthorized operations, such as deleting buttons, via crafted requests. Public descriptions in R...

CVE-2024-3475

The Sticky Buttons WordPress plugin versions prior to 3.2.4 is vulnerable to a Cross-Site Request Forgery (CSRF) attack. The root cause is a lack of CSRF checks in certain bulk actions , which could allow an attacker to trick a logged-in administrator into performing unwanted actions, such as del...

PT-2024-26150

Name of the Vulnerable Software and Affected Versions The Wow Skype Buttons WordPress plugin versions prior to 4.0.4 Description The issue is related to the lack of CSRF checks in some bulk actions, which could allow attackers to make logged-in admins perform unwanted actions, such as deleting...