CVE-2024-5028

CVE-2024-5028: CM WordPress Search And Replace Plugin < 1.3.9 - Plugin Reset via CSRF

Vendor Unknown
Product CM WordPress Search And Replace Plugin
Published July 13, 2024
Last update August 1, 2024

CVSS base score

What the vulnerability does

01Description

The CM WordPress Search And Replace Plugin WordPress plugin before 1.3.9 does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks

Key dates

02Disclosure timeline

July 13, 2024 CVE published
August 1, 2024 Record updated