CVE-2024-1755

The NPS computy WordPress plugin (versions 2.7.5 and earlier ) is vulnerable to Cross-Site Request Forgery (CSRF) due to a lack of CSRF checks in certain areas. This flaw could allow an attacker to trick a logged-in user into performing unwanted actions, specifically including results deletion . ...

CVE-2024-1754

The NPS computy WordPress plugin (versions 2.7.5 and earlier ) is vulnerable to Stored Cross-Site Scripting (XSS) . The root cause is the failure to properly sanitise and escape certain plugin settings before they are displayed on a page. This flaw allows high-privilege users, such as administrat...