cleantalk
Vulnerabilities and Security Researches

WP Customer Area, CVE-2024-12436

CVE, Research URL

CVE-2024-12436

Application

WP Customer Area

Published on
Jan 27, 2025
Research Description
The WP Customer Area WordPress plugin through 8.2.4 does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks
Affected versions
Min -, max 8.2.5.
Status
vulnerable