CVE-2024-4751

MediumCVSS 4.3/10Last modified Jun 17, 2026

Description

The WP Prayer II WordPress plugin through 2.4.7 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack

Metrics

CVSS 3.1 4.3/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Weakness enumeration

CWE-352

Affected software

Vendor	Product	Versions
Unknown	WP Prayer II	<= 2.4.7
goprayer	wp_prayer	<= 2.4.7

References

Timeline

Published: Jun 14, 2024
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2024

CVE-2024-475158.1A vulnerability was found in Pagure. Support of symbolic links during repository archiving of repositories allows the disclosure of local fi CVE-2024-475169.8A vulnerability was found in Pagure. An argument injection in Git during retrieval of the repository history leads to remote code execution CVE-2024-475176.8Expired and unusable administrator authentication tokens can be revealed by units that have timed out from ETM access CVE-2024-475187.6Specially constructed queries targeting ETM could discover active remote access sessions CVE-2024-475197.1Backup uploads to ETM subject to man-in-the-middle interception CVE-2024-47525.9The EventON WordPress plugin before 2.2.15 does not sanitise and escape some of its settings, which could allow high privilege users such as CVE-2024-475207.6A user with advanced report application access rights can perform actions for which they are not authorized CVE-2024-475227.5Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to version 7.0.7 CVE-2024-475235.4LibreNMS is an open-source, PHP/MySQL/SNMP-based network monitoring system. A Stored Cross-Site Scripting (XSS) vulnerability in the "Alert CVE-2024-475244.8LibreNMS is an open-source, PHP/MySQL/SNMP-based network monitoring system. User with Admin role can create a Device Groups, the application CVE-2024-475255.4LibreNMS is an open-source, PHP/MySQL/SNMP-based network monitoring system. A Stored Cross-Site Scripting (XSS) vulnerability in the "Alert CVE-2024-475262.4LibreNMS is an open-source, PHP/MySQL/SNMP-based network monitoring system. A Self Cross-Site Scripting (Self-XSS) vulnerability in the "Ale