CVE-2024-5076

The wp-eMember WordPress plugin before 10.6.6 does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks
CVSS

No CVSS.

Configurations

Configuration 1 (hide)

cpe:2.3:a:tipsandtricks-hq:wp_emember:*:*:*:*:*:wordpress:*:*

History

06 May 2025, 17:02

Type Values Removed Values Added
CPE cpe:2.3:a:tipsandtricks-hq:wp_emember:*:*:*:*:*:wordpress:*:*
CWE CWE-352
First Time Tipsandtricks-hq wp Emember
Tipsandtricks-hq
References () https://wpscan.com/vulnerability/01cbc841-a30f-4df5-ab7f-0c2c7469657b/ - () https://wpscan.com/vulnerability/01cbc841-a30f-4df5-ab7f-0c2c7469657b/ - Exploit, Third Party Advisory

13 Jul 2024, 06:15

Type Values Removed Values Added
New CVE

Information

Published : 2024-07-13 06:15

Updated : 2025-05-06 17:02


NVD link : CVE-2024-5076

Mitre link : CVE-2024-5076


JSON object : View

Products Affected

tipsandtricks-hq

  • wp_emember
CWE
CWE-352

Cross-Site Request Forgery (CSRF)