CyberSecBulletin

WP Prayer vulnerabilities

We track 2 vulnerabilities in WP Prayer products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on May 15, 2024.

2vulnerabilities
0critical
2high
0exploited
8.2average CVSS score

Latest WP Prayer vulnerabilities

  • 8.8 High severity

    WP Prayer: Cross-Site Request Forgery

    CVE-2024-3406WP Prayer

    The WP Prayer WordPress plugin through 2.0.9 does not have CSRF check in place when updating its email settings, which could allow attackers to make a logged in admin change them via a CSRF attack

  • 7.6 High severity

    WP Prayer: Cross-Site Request Forgery

    CVE-2024-3405WP Prayer

    The WP Prayer WordPress plugin through 2.0.9 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack