CVE-2024-6022

CVE-2024-6022 concerns the ContentLock WordPress plugin (versions

CVE-2024-6023

The CVE-2024-6023 entry documents a CSRF vulnerability in the ContentLock WordPress plugin, affecting versions up to 1.0.3. The issue is that there is no CSRF check when adding emails, which could allow a logged-in attacker to trick an admin into adding an email via a CSRF attack. The connected R...

CVE-2024-6024

CVE-2024-6024 affects ContentLock WordPress plugin up to version 1.0.3. The issue is a CSRF vulnerability where deleting groups or emails can be performed by an attacker against a logged-in admin, enabling removal actions via CSRF. The connected Red Hat and CVE records restate the same descriptio...