Lucene search
Bob MatyasWPVDB-ID:64EC57A5-35D8-4C69-BDBA-096C2245A0DBHistoryJun 05, 2024 - 12:00 a.m.
Muslim Prayer Time BD <= 2.4 - Settings Reset via CSRF
2024-06-0500:00:00
Bob Matyas
wpscan.com
3
muslim prayer time bd
csrf
settings reset
Description The plugin does not have CSRF check in place when reseting its settings, which could allow attackers to make a logged in admin reset them via a CSRF attack
PoC
Make a logged in admin open an HTML file containing:
Related
nvd
nvd
CVE-2024-4758
2024-06-26 06:15:16
cvelist
cvelist
CVE-2024-4758 Muslim Prayer Time BD <= 2.4 - Settings Reset via CSRF
2024-06-26 06:00:02
vulnrichment
vulnrichment
CVE-2024-4758 Muslim Prayer Time BD <= 2.4 - Settings Reset via CSRF
2024-06-26 06:00:02
wpexploit
wpexploit
Muslim Prayer Time BD <= 2.4 - Settings Reset via CSRF
2024-06-05 00:00:00
cve
cve
CVE-2024-4758
2024-06-26 06:15:16
wordfence
wordfence
AI Score
6.3
Confidence
High
EPSS
0
Percentile
9.1%
Related for WPVDB-ID:64EC57A5-35D8-4C69-BDBA-096C2245A0DB