CVE-2024-7892

Description

The adstxt Plugin WordPress plugin through 1.0.0 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack

Reserved 2024-08-16 | Published 2024-09-25 | Updated 2024-09-25 | Assigner WPScan

Product status

Default status
affected

Any version
affected

Credits

Norbert Hofmann finder

WPScan coordinator

References

wpscan.com/vulnerability/c07a4992-c9a1-46a4-9a52-9e38b6d15440/ exploit vdb-entry technical-description

cve.org (CVE-2024-7892)

nvd.nist.gov (CVE-2024-7892)

Download JSON