Lucene search

K
nvd[email protected]NVD:CVE-2024-3940
HistoryMay 14, 2024 - 3:42 p.m.

CVE-2024-3940

2024-05-1415:42:36
web.nvd.nist.gov
1
recaptcha jetpack
wordpress plugin
csrf vulnerability
csrf attack

6.4 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.0%

The reCAPTCHA Jetpack WordPress plugin through 0.2.2 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack

6.4 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.0%