Lucene search
Bob MatyasWPVDB-ID:1BFAB060-64D2-4C38-8BC8-A8F81C5A6E0DHistoryApr 24, 2024 - 12:00 a.m.
WP Prayer <= 2.0.9 - Email Settings Update via CSRF
2024-04-2400:00:00
Bob Matyas
wpscan.com
8
csrf
vulnerability
email settings
update
wordpress plugin
Description The plugin does not have CSRF check in place when updating its email settings, which could allow attackers to make a logged in admin change them via a CSRF attack
PoC
Make a logged in admin open an HTML file containing:
Related
cvelist
cvelist
CVE-2024-3406 WP Prayer <= 2.0.9 - Email Settings Update via CSRF
2024-05-15 06:00:02
nvd
nvd
CVE-2024-3406
2024-05-15 06:15:11
vulnrichment
vulnrichment
CVE-2024-3406 WP Prayer <= 2.0.9 - Email Settings Update via CSRF
2024-05-15 06:00:02
cve
cve
CVE-2024-3406
2024-05-15 06:15:11
wpexploit
wpexploit
WP Prayer <= 2.0.9 - Email Settings Update via CSRF
2024-04-24 00:00:00
wordfence
wordfence
AI Score
6.3
Confidence
High
EPSS
0
Percentile
9.0%
Related for WPVDB-ID:1BFAB060-64D2-4C38-8BC8-A8F81C5A6E0D