CVE-2024-2857

The Simple Buttons Creator WordPress plugin (versions 1.04 and earlier ) is vulnerable to multiple security flaws in its add button function. The root causes include a lack of authorization and CSRF protection, allowing unauthenticated users to call the function directly or via CSRF attacks . Add...

CVE-2024-2858

The Simple Buttons Creator WordPress plugin, in versions 1.04 and earlier , is vulnerable to a Cross-Site Request Forgery (CSRF) attack due to missing CSRF checks in certain locations. This flaw could allow an attacker to trick a logged-in user into performing unwanted actions, specifically inclu...