CVE-2024-8047

The Visual Sound (old) WordPress plugin, v1.06 and earlier, is disclosed as lacking CSRF protection when updating settings. This enables CSRF-based changes by an attacker with a logged‑in admin account. The exact patch version is not provided in the supplied documents; remediation is to upgrade t...

CVE-2024-7859

The Visual Sound WordPress plugin through 1.03 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack...