CVE-2024-4758 Muslim Prayer Time BD <= 2.4 - Settings Reset via CSRF

2024-06-2606:00:02

WPScan

github.com

wordpress

csrf

cve-2024-4758

settings reset

AI Score

6.7

Confidence

High

SSVC

Exploitation

poc

Automatable

Technical Impact

partial

JSON

The Muslim Prayer Time BD WordPress plugin through 2.4 does not have CSRF check in place when reseting its settings, which could allow attackers to make a logged in admin reset them via a CSRF attack

ADP Affected

[
  {
    "cpes": [
      "cpe:2.3:a:muslim_prayer_time_bd:muslim_prayer_time_bd:*:*:*:*:*:*:*:*"
    ],
    "vendor": "muslim_prayer_time_bd",
    "product": "muslim_prayer_time_bd",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "versionType": "semver",
        "lessThanOrEqual": "2.4"
      }
    ],
    "defaultStatus": "unknown"
  }
]