CVE-2024-12709

The Bulk Me Now! WordPress plugin through 2.0 does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks.
CVSS

No CVSS.

Configurations

Configuration 1 (hide)

cpe:2.3:a:ombu:bulk_me_now\!:*:*:*:*:*:wordpress:*:*

History

11 May 2025, 23:49

Type Values Removed Values Added
CWE CWE-352
References () https://wpscan.com/vulnerability/d93056f1-1a6e-405f-a094-d4d270393f87/ - () https://wpscan.com/vulnerability/d93056f1-1a6e-405f-a094-d4d270393f87/ - Exploit, Third Party Advisory
CPE cpe:2.3:a:ombu:bulk_me_now\!:*:*:*:*:*:wordpress:*:*
First Time Ombu bulk Me Now\!
Ombu

30 Jan 2025, 06:15

Type Values Removed Values Added
New CVE

Information

Published : 2025-01-30 06:15

Updated : 2025-05-11 23:49


NVD link : CVE-2024-12709

Mitre link : CVE-2024-12709


JSON object : View

Products Affected

ombu

  • bulk_me_now\!
CWE
CWE-352

Cross-Site Request Forgery (CSRF)