Filtered by vendor Projectcaruso
Subscriptions
Filtered by product Pray For Me
Subscriptions
Total
2 CVE
CVE | Vendors | Products | Updated | CVSS v3.1 |
---|---|---|---|---|
CVE-2024-3965 | 1 Projectcaruso | 1 Pray For Me | 2025-05-13 | 5.4 Medium |
The Pray For Me WordPress plugin through 1.0.4 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack | ||||
CVE-2024-3966 | 1 Projectcaruso | 1 Pray For Me | 2024-11-21 | 6.1 Medium |
The Pray For Me WordPress plugin through 1.0.4 does not sanitise and escape some parameters, which could unauthenticated visitors to perform Cross-Site Scripting attacks that trigger when an admin visits the Prayer Requests in the WP Admin |
Page 1 of 1.