Hueman Vulnerabilities

The Hueman theme for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 3.7.24. This is due to missing or incorrect nonce validation. This makes it possible for unauthenticated attackers to dismiss notices via a forged request granted they can trick a site administrator into perform...

CVSS:

4.3

Affected:

up to 3.7.24

Fixed in:

3.7.25

Disclosed:

Jun 18, 2024

CVE-2024-35772 on NVD →

The Hueman theme for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 3.6.3. This is due to missing or incorrect nonce validation on the save_meta_box() function. This makes it possible for unauthenticated attackers to save metabox data via a forged request granted they can trick...

CVSS:

4.3

Affected:

up to 3.6.3

Fixed in:

3.6.4

Disclosed:

Sep 26, 2020

CVE-2020-36753 on NVD →