THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2024-0830 (MEDIUM 4.3) — The Comments Extra Fields For Post,Pages and CPT plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 5.0. This is due to missing or incorrect nonce validation on several ajax actions. This makes it possible for unauthenticated at

[NVD] CVE-2024-0830 (MEDIUM 4.3) — The Comments Extra Fields For Post,Pages and CPT plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 5.0. This is due to missing or incorrect nonce validation on several ajax actions. This makes it possible for unauthenticated at

lownvdPublished 2024-03-13

CVE-2024-0830 CVSS: 4.3 MEDIUM Published: 2024-03-13T16:15:14.307

The Comments Extra Fields For Post,Pages and CPT plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 5.0. This is due to missing or incorrect nonce validation on several ajax actions. This makes it possible for unauthenticated attackers to invoke those actions via a forged request

Indicators of compromise

CVE-2024-0830cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2024-0830