Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
wpvulndbBob MatyasWPVDB-ID:94F4CC45-4C55-43D4-8AD2-A20C118B589F
HistoryMay 24, 2024 - 12:00 a.m.

WP Prayer II <= 2.4.7 - Settings Update via CSRF

2024-05-2400:00:00
Bob Matyas
wpscan.com
1
wordpress
prayer ii
csrf
vulnerability
settings update

6.2 Medium

AI Score

Confidence

High

JSON

Description The plugin does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack

PoC

Have an admin open an HTML file containing:

Related

cvelist 1
nvd 1
wpexploit 1
cve 1
wordfence 1
cvelist
cvelist
CVE-2024-4751 WP Prayer II <= 2.4.7 - Settings Update via CSRF
2024-06-14 06:00:05
nvd
nvd
CVE-2024-4751
2024-06-14 06:15:13
wpexploit
wpexploit
WP Prayer II <= 2.4.7 - Settings Update via CSRF
2024-05-24 00:00:00
cve
cve
CVE-2024-4751
2024-06-14 06:15:13
wordfence
wordfence
Wordfence Intelligence Weekly WordPress Vulnerability Report (May 20, 2024 to May 26, 2024)
2024-05-30 15:23:45

6.2 Medium

AI Score

Confidence

High

JSON
Related for WPVDB-ID:94F4CC45-4C55-43D4-8AD2-A20C118B589F
cvelist1nvd1wpexploit1cve1wordfence1