CVE-2024-53793 HIGH

CVE-2024-53793: WordPress eDoc Easy Tables plugin <= 1.29 - CSRF to SQL Injection vulnerability

Vendor Jerodmoore
Product eDoc Easy Tables
Weakness CWE-352 · CSRF
Published December 2, 2024
Last update April 28, 2026
View on NVD All CVEs

CVSS base score

8.2/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction Required
Confidentiality High
Integrity None

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:L

What the vulnerability does

01Description

Cross-Site Request Forgery (CSRF) vulnerability in jerodmoore eDoc Easy Tables edoc-easy-tables allows Blind SQL Injection.This issue affects eDoc Easy Tables: from n/a through <= 1.29.

Explanation of Vulnerability in Simple Terms

02Summary

eDoc Easy Tables versions 1.29 and earlier are vulnerable to cross-site request forgery (CSRF) attacks. An attacker can craft a malicious webpage that, when visited by a logged-in site administrator, performs unwanted actions on the site without their knowledge. The attack requires the victim to visit the attacker's page while authenticated. This can lead to unauthorized data modification and partial service disruption.

What an attacker can do

03Attacker Capabilities

Trick a logged-in admin into performing unwanted actions on the site, such as modifying or deleting data.

Potential impact on your site

04Site Impact

Administrators could unknowingly authorize changes to site data or configuration if they visit a malicious link while logged in.

Conditions required to exploit

05Prerequisites

Victim must be logged in and visit an attacker-controlled webpage; no special privileges required.

Key dates

06Disclosure timeline

December 2, 2024 CVE published
April 28, 2026 Record updated

Related vulnerabilities

08Related CVE

CVE-2024-32110 WordPress Event Manager and Tickets Selling Plugin for WooCommerce plugin <= 4.1.2 - Cross Site Request Forgery (CSRF) vulnerability CVE-2026-8907 WP-Ultimate-Map <= 1.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting via 'zoom-level' Parameter CVE-2026-9730 Remove NoFollow Commenter URL <= 1.0 - Cross-Site Request Forgery to Settings Update CVE-2026-57757 WordPress pCloud WP Backup plugin <= 2.0.2 - Cross Site Request Forgery (CSRF) vulnerability CVE-2026-11981 GiveWP <= 4.15.3 - Cross-Site Request Forgery