← CVE Intelligence

CVE-2024-4969

Widget Bundle <= 2.0.0 - Widget Disable/Enable via CSRF PUBLISHED

Description (CNA)

The Widget Bundle WordPress plugin through 2.0.0 does not have CSRF checks when logging Widgets, which could allow attackers to make logged in admin enable/disable widgets via a CSRF attack

Affected (CNA)

Vendor / productVersions
Unknown / Widget Bundleaffected 0 through 2.0.0

CWE

No CWE identifiers supplied.

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.