EUVD-2024-22105

Malicious code in bioql PyPI...

CVE-2024-24706

Cross-Site Request Forgery CSRF vulnerability in Forum One WP-CFM wp-cfm.This issue affects WP-CFM: from n/a through 1.7.8...

CVE-2024-24706

Cross-Site Request Forgery CSRF vulnerability in Forum One WP-CFM wp-cfm.This issue affects WP-CFM: from n/a through 1.7.8...

CVE-2024-24706

Cross-Site Request Forgery CSRF vulnerability in Forum One WP-CFM wp-cfm.This issue affects WP-CFM: from n/a through 1.7.8...

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in Forum One WP-CFM wp-cfm.This issue affects WP-CFM: from n/a through 1.7.8...

CVE-2024-24706

CVE-2024-24706 describes a Cross-Site Request Forgery (CSRF) vulnerability in the Forum One WP-CFM plugin for WordPress (wp-cfm) affecting version 1.7.8 and earlier. The root cause is CSRF in WP-CFM that allows unauthorized actions to be performed on behalf of an authenticated user without their ...

CVE-2024-24706 WordPress WP-CFM Plugin <= 1.7.8 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Forum One WP-CFM wp-cfm.This issue affects WP-CFM: from n/a through 1.7.8...

CVE-2024-24706 WordPress WP-CFM Plugin <= 1.7.8 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Forum One WP-CFM wp-cfm.This issue affects WP-CFM: from n/a through 1.7.8...

WP-CFM < 1.7.9 - Cross-Site Request Forgery via multiple AJAX functions

Description The WP-CFM plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.7.8. This is due to missing or incorrect nonce validation on multiple AJAX functions. This makes it possible for unauthenticated attackers to modify the plugin's setting...

WordPress WP-CFM Plugin <= 1.7.8 is vulnerable to Cross Site Request Forgery (CSRF)

Software WP-CFM Type Plugin Vulnerable versions = 1.7.8 Fixed in 1.7.9 OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-24706 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID af696388f906 Credits Nguyen Xuan Chien Required...