Muslim Prayer Time BD <= 2.4 - Cross-Site Request Forgery to Settings Reset
mediumThe Muslim Prayer Time BD plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.4. This is due to missing or incorrect nonce validation on the muslim-prayer-time-bd/admin-settings.php page. This makes it possible for unauthenticated attackers to reset settings via a fo...
- CVSS:
- 4.3
- Affected:
- up to 2.4
- Fixed in:
- 2.5
- Disclosed:
- Jun 5, 2024