CVE-2024-6412

CVE-2024-6412: HTML Forms – Simple WordPress Forms Plugin < 1.3.34 - Bulk Delete via CSRF

Vendor Unknown
Product HTML Forms
Published July 31, 2024
Last update August 1, 2024
View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

The HTML Forms WordPress plugin before 1.3.34 does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks

Key dates

02Disclosure timeline

July 31, 2024 CVE published
August 1, 2024 Record updated