The wp-eMember WordPress plugin before 10.6.6 does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks
CVSS
No CVSS.
References
Link | Resource |
---|---|
https://wpscan.com/vulnerability/01cbc841-a30f-4df5-ab7f-0c2c7469657b/ | Exploit Third Party Advisory |
https://wpscan.com/vulnerability/01cbc841-a30f-4df5-ab7f-0c2c7469657b/ | Exploit Third Party Advisory |
Configurations
History
06 May 2025, 17:02
Type | Values Removed | Values Added |
---|---|---|
CPE | cpe:2.3:a:tipsandtricks-hq:wp_emember:*:*:*:*:*:wordpress:*:* | |
CWE | CWE-352 | |
First Time |
Tipsandtricks-hq wp Emember
Tipsandtricks-hq |
|
References | () https://wpscan.com/vulnerability/01cbc841-a30f-4df5-ab7f-0c2c7469657b/ - Exploit, Third Party Advisory |
13 Jul 2024, 06:15
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2024-07-13 06:15
Updated : 2025-05-06 17:02
NVD link : CVE-2024-5076
Mitre link : CVE-2024-5076
JSON object : View
Products Affected
tipsandtricks-hq
- wp_emember
CWE
CWE-352
Cross-Site Request Forgery (CSRF)