CVE-2024-7688

Description

The AZIndex WordPress plugin through 0.8.1 does not have CSRF checks in some places, which could allow attackers to make logged in admin delete arbitrary indexes via a CSRF attack

Reserved 2024-08-11 | Published 2024-09-09 | Updated 2024-09-09 | Assigner WPScan

Problem types

CWE-352 Cross-Site Request Forgery (CSRF)

Product status

Default status
affected

Any version
affected

Credits

Bob Matyas finder

WPScan coordinator

References

wpscan.com/...rability/6c1d4354-b88b-46ca-b25a-efb9518f4955/ exploit vdb-entry technical-description

cve.org (CVE-2024-7688)

nvd.nist.gov (CVE-2024-7688)

Download JSON