contentlock vulnerabilities

2 known vulnerabilities in contentlock from Adam Solymosi. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  ContentLock: Cross-Site Request Forgery

  CVE-2024-6023Jul 12, 2024ContentLock

  The ContentLock WordPress plugin through 1.0.3 does not have CSRF check in place when adding emails, which could allow attackers to make a logged in admin perform such action via a CSRF attack

• 8.8 High severity

  ContentLock: Cross-Site Request Forgery

  CVE-2024-6022Jul 12, 2024ContentLock

  The ContentLock WordPress plugin through 1.0.3 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack