Filtered by vendor Projectcaruso Subscriptions
Filtered by product Pray For Me Subscriptions
Total 2 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2024-3965 1 Projectcaruso 1 Pray For Me 2025-05-13 5.4 Medium
The Pray For Me WordPress plugin through 1.0.4 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack
CVE-2024-3966 1 Projectcaruso 1 Pray For Me 2024-11-21 6.1 Medium
The Pray For Me WordPress plugin through 1.0.4 does not sanitise and escape some parameters, which could unauthenticated visitors to perform Cross-Site Scripting attacks that trigger when an admin visits the Prayer Requests in the WP Admin