The HTML Forms WordPress plugin before 1.3.34 does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks
CVSS
No CVSS.
References
| Link | Resource |
|---|---|
| https://wpscan.com/vulnerability/9eb0dad6-3c19-4fe4-a20d-d45b51410444/ | Exploit Third Party Advisory |
Configurations
History
10 Jun 2025, 16:11
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-352 | |
| First Time |
Ibericode html Forms
Ibericode |
|
| CPE | cpe:2.3:a:ibericode:html_forms:*:*:*:*:*:wordpress:*:* | |
| References | () https://wpscan.com/vulnerability/9eb0dad6-3c19-4fe4-a20d-d45b51410444/ - Exploit, Third Party Advisory |
31 Jul 2024, 12:57
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-07-31 06:15
Updated : 2025-06-10 16:11
NVD link : CVE-2024-6412
Mitre link : CVE-2024-6412
JSON object : View
Products Affected
ibericode
- html_forms
CWE
CWE-352
Cross-Site Request Forgery (CSRF)