Wp Social Autoconnect ProjectWp Social Autoconnect
2 matches found
CVE-2024-12279
CVE-2024-12279 refers to the WP Social AutoConnect WordPress plugin (affected versions up to 4.6.2) and is due to missing or incorrect nonce validation, enabling an unauthenticated attacker to trigger a CSRF that can lead to a reflected XSS when an admin is tricked into performing an action. Word...
6.1CVSS6AI score0.00195EPSS
Save