Skip to content
OpenAdvisories
Medium · 5.4 CVE-2024-38344 EUVD-2024-37810GHSA-jvmf-76g5-h4gv

A cross-site request forgery vulnerability exists in WP Tweet Walls versions prior to 1.0.4. If this vulnerability is exploited, an attacke…

Published Jul 4, 2024 · Updated Dec 6, 2024 · Assigned by jpcert

Description

A cross-site request forgery vulnerability exists in WP Tweet Walls versions prior to 1.0.4. If this vulnerability is exploited, an attacker allows a user who logs in to the WordPress site where the affected plugin is enabled to access a malicious page. As a result, the user may perform unintended operations on the WordPress site.

Affected products

VendorProductAffectedFixed
Sola Plugins WP Tweet Walls versions prior to 1.0.4 —

References