CyberSecBulletin

ContentLock vulnerabilities

We track 3 vulnerabilities in ContentLock products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on July 12, 2024.

3vulnerabilities
0critical
3high
0exploited
8.8average CVSS score

Latest ContentLock vulnerabilities

  • 8.8 High severity

    ContentLock: Cross-Site Request Forgery

    CVE-2024-6024ContentLock

    The ContentLock WordPress plugin through 1.0.3 does not have CSRF check in place when deleting groups or emails, which could allow attackers to make a logged in admin remove them via a CSRF attack

  • 8.8 High severity

    ContentLock: Cross-Site Request Forgery

    CVE-2024-6023ContentLock

    The ContentLock WordPress plugin through 1.0.3 does not have CSRF check in place when adding emails, which could allow attackers to make a logged in admin perform such action via a CSRF attack

  • 8.8 High severity

    ContentLock: Cross-Site Request Forgery

    CVE-2024-6022ContentLock

    The ContentLock WordPress plugin through 1.0.3 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack