CVE-2024-2739

The Advanced Search WordPress plugin through 1.1.6 does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks
CVSS

No CVSS.

Configurations

Configuration 1 (hide)

cpe:2.3:a:mndpsingh287:advanced_search:*:*:*:*:*:wordpress:*:*

History

08 May 2025, 19:55

Type Values Removed Values Added
First Time Mndpsingh287
Mndpsingh287 advanced Search
References () https://wpscan.com/vulnerability/5b84145b-f94e-4ea7-84d5-56cf776817a2/ - () https://wpscan.com/vulnerability/5b84145b-f94e-4ea7-84d5-56cf776817a2/ - Exploit, Third Party Advisory
CWE CWE-352
CPE cpe:2.3:a:mndpsingh287:advanced_search:*:*:*:*:*:wordpress:*:*

15 Apr 2024, 05:15

Type Values Removed Values Added
New CVE

Information

Published : 2024-04-15 05:15

Updated : 2025-05-08 19:55


NVD link : CVE-2024-2739

Mitre link : CVE-2024-2739


JSON object : View

Products Affected

mndpsingh287

  • advanced_search
CWE
CWE-352

Cross-Site Request Forgery (CSRF)