CVE-2023-0498

CVE-2023-0498 affects the WP Education WordPress plugin prior to 1.2.7. The vulnerability is a CSRF flaw in the plugin activation flow that could allow a CSRF attacker to cause logged-in admins to activate arbitrary plugins on the blog. Remediation: upgrade to WP Education 1.2.7 or later (patched...

CVE-2024-49630

CVE-2024-49630 affects WP Education (WordPress plugin for Elementor)