Skip to content
OpenAdvisories

Product · odude

Crypto Tool

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.8
    CVE-2024-9990

    Crypto <= 2.15 - Cross-Site Request Forgery to Authentication Bypass

    The Crypto plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.15. This is due to missing nonce validation in the 'crypto_connect_ajax_process::check' function. This makes it possible for unauthenticated attack…

    odude Crypto Tool Web / CMS