Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
wpvulndbBob MatyasWPVDB-ID:0E1BA2B3-5849-42F6-B503-8B3B520E4A79
HistoryMay 24, 2024 - 12:00 a.m.

Pray For Me <= 1.0.4 - Settings Update via CSRF

2024-05-2400:00:00
Bob Matyas
wpscan.com
6
csrf
settings update
security vulnerability
pray for me

AI Score

6.2

Confidence

High

JSON

Description The plugin does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack

PoC

Make a logged in admin open an HTML file containing:

Related

cvelist 1
nvd 1
vulnrichment 1
wpexploit 1
cve 1
wordfence 1
cvelist
cvelist
CVE-2024-3965 Pray For Me <= 1.0.4 - Settings Update via CSRF
2024-06-14 06:00:02
nvd
nvd
CVE-2024-3965
2024-06-14 06:15:12
vulnrichment
vulnrichment
CVE-2024-3965 Pray For Me <= 1.0.4 - Settings Update via CSRF
2024-06-14 06:00:02
wpexploit
wpexploit
Pray For Me <= 1.0.4 - Settings Update via CSRF
2024-05-24 00:00:00
cve
cve
CVE-2024-3965
2024-06-14 06:15:12
wordfence
wordfence
Wordfence Intelligence Weekly WordPress Vulnerability Report (May 20, 2024 to May 26, 2024)
2024-05-30 15:23:45

AI Score

6.2

Confidence

High

JSON
Related for WPVDB-ID:0E1BA2B3-5849-42F6-B503-8B3B520E4A79
cvelist1nvd1vulnrichment1wpexploit1cve1wordfence1