CVE-2024-4758

CVE-2024-4758 affects the Muslim Prayer Time BD WordPress plugin up to version 2.4. The root cause is a missing CSRF check when resetting plugin settings, enabling a CSRF attack to reset settings by a logged-in admin. Public sources from Red Hat and Patchstack corroborate versions before 2.5 and ...