Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2

CVE-2024-3965

Pray For Me <= 1.0.4 - Settings Update via CSRF

The Pray For Me WordPress plugin through 1.0.4 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed
Vendors
Projectcaruso
Products
Pray For Me
CVE-2024-3966

Pray For Me <= 1.0.4 - Unauthenticated Stored XSS

The Pray For Me WordPress plugin through 1.0.4 does not sanitise and escape some parameters, which could unauthenticated visitors to perform Cross-Site Scripting attacks that trigger when an admin visits the Prayer Requests in the WP Admin

CVSS 3.1 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Projectcaruso
Products
Pray For Me