Lucene search
+L

4 matches found

Patchstack
Patchstack
added 2024/11/05 6:57 a.m.5 views

WordPress Post From Frontend plugin <= 1.0.0 - Post Deletion via CSRF vulnerability

Post Deletion via CSRF vulnerability discovered by Bob Matyas in WordPress Plugin Post From Frontend versions = 1.0.0...

4.3CVSS7AI score0.00203EPSS
SaveExploits1References1Affected Software1
OSV
OSV
added 2024/11/05 6:15 a.m.6 views

CVE-2024-9689

The Post From Frontend WordPress plugin through 1.0.0 does not have CSRF check when deleting posts, which could allow attackers to make logged in admin perform such action via a CSRF attack...

4.3CVSS5.8AI score0.00203EPSS
SaveExploits1References1
Cvelist
Cvelist
added 2024/11/05 6:0 a.m.31 views

CVE-2024-9689 Post From Frontend <= 1.0.0 - Post Deletion via CSRF

The Post From Frontend WordPress plugin through 1.0.0 does not have CSRF check when deleting posts, which could allow attackers to make logged in admin perform such action via a CSRF attack...

0.00203EPSS
SaveExploits1References1
Patchstack
Patchstack
added 2024/11/05 12:0 a.m.12 views

WordPress Post From Frontend Plugin <= 1.0.0 is vulnerable to Cross Site Request Forgery (CSRF)

Software Post From Frontend Type Plugin Vulnerable versions = 1.0.0 Fixed in N/A OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-9689 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID 3efb0a9a0186 Credits Bob Matyas Required...

4.3CVSS6.7AI score0.00203EPSS
SaveExploits1References4Affected Software1
Rows per page
Query Builder