← CVE Intelligence

CVE-2024-1232

CM Download Manager < 2.9.0 - Download Deletion via CSRF PUBLISHED

Description (CNA)

The CM Download Manager WordPress plugin before 2.9.0 does not have CSRF checks in some places, which could allow attackers to make logged in admins delete downloads via a CSRF attack

Affected (CNA)

Vendor / productVersions
Unknown / CM Download Manager affected 0 before 2.9.0

CWE

No CWE identifiers supplied.

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.