CVE-2024-52415 — WordPress SK WP Settings Backup plugin <= 1.0 - CSRF to PHP Object Injection vulnerability

CVE-2024-52415

WordPress SK WP Settings Backup plugin <= 1.0 - CSRF to PHP Object Injection vulnerability PUBLISHED

Description (CNA)

Cross-Site Request Forgery (CSRF) vulnerability in skipstorm SK WP Settings Backup sk-wp-settings-backup allows Object Injection.This issue affects SK WP Settings Backup: from n/a through <= 1.0.

Affected (CNA)

Vendor / product	Versions
skipstorm / SK WP Settings Backup	affected 0 through 1.0

CWE

CWE-352

References

https://patchstack.com/database/Wordpress/Plugin/sk-wp-settings-backup/vulnerability/wordpress-sk-wp-settings-backup-plugin-1-0-csrf-to-php-object-injection-vulnerability?_s_id=cve

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.