Crypto Tool vulnerabilities

3 known vulnerabilities in Crypto Tool from Odude. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  Crypto Tool: Cross-Site Request Forgery

  CVE-2024-9990Oct 29, 2024Odude

  The Crypto plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.15. This is due to missing nonce validation in the 'crypto_connect_ajax_process::check' function. This makes it possible for unauthenticated attacke

• 9.8 Critical severity

  Crypto Tool: Authentication Bypass Using an Alternate Path or Channel

  CVE-2024-9989Oct 29, 2024OdudeEPSS 7.11%

  The Crypto plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 2.18. This is due to a limited arbitrary method call to 'crypto_connect_ajax_process::log_in' function in the 'crypto_connect_ajax_process' function. This

• 9.8 Critical severity

  Crypto Tool: Authentication Bypass Using an Alternate Path or Channel

  CVE-2024-9988Oct 29, 2024OdudeEPSS 1.1%

  The Crypto plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 2.19. This is due to missing validation on the user being supplied in the 'crypto_connect_ajax_process::register' function. This makes it possible for unau