Skip to content
CVE PROGRAM SOURCE RECORD5.5 Medium

CVE-2024-3824

Base64 Encoder/Decoder <= 0.9.2 - Settings Reset via CSRF

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
WPScan

Description

The Base64 Encoder/Decoder WordPress plugin through 0.9.2 does not have CSRF check in place when resetting its settings, which could allow attackers to make a logged in admin reset them via a CSRF attack

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Unknown Base64 Encoder/Decoder

Default version status: affected

  • 0 to ≤ 0.9.2affected

References