Skip to content
OpenAdvisories

Product · abrg

WP Prayer

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 4.3
    CVE-2021-4412

    WP Prayer <= 1.6.5 - Cross-Site Request Forgery Bypass

    The WP Prayer plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.6.5. This is due to missing or incorrect nonce validation on the save() and export() functions. This makes it possible for unauthenticated attac…

    abrg WP Prayer Web / CMS