CVE-2024-4758

The Muslim Prayer Time BD WordPress plugin (versions prior to 2.5 ) is vulnerable to a Cross-Site Request Forgery (CSRF) attack. The root cause is a lack of CSRF checks when resetting plugin settings, which could allow an attacker to force a logged-in administrator to reset these settings. The im...