The Simple Nav Archives WordPress plugin through 2.1.3 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack
CVSS
No CVSS.
References
| Link | Resource |
|---|---|
| https://wpscan.com/vulnerability/f432901f-31dd-433c-91bf-ec19fa61b6d8/ | Exploit Third Party Advisory |
Configurations
History
12 Jun 2025, 15:43
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:philipwalton:simple_nav_archives:*:*:*:*:*:wordpress:*:* | |
| First Time |
Philipwalton simple Nav Archives
Philipwalton |
|
| CWE | CWE-352 | |
| References | () https://wpscan.com/vulnerability/f432901f-31dd-433c-91bf-ec19fa61b6d8/ - Exploit, Third Party Advisory |
15 May 2025, 20:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-05-15 20:15
Updated : 2025-06-12 15:43
NVD link : CVE-2024-8398
Mitre link : CVE-2024-8398
JSON object : View
Products Affected
philipwalton
- simple_nav_archives
CWE
CWE-352
Cross-Site Request Forgery (CSRF)