Adamsolymosi Contentlock vulnerabilities
3 known vulnerabilities affecting adamsolymosi/contentlock.
Total CVEs
3
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
HIGH3
Vulnerabilities
Page 1 of 1
CVE-2024-6023HIGHCVSS 8.8fixed in 1.0.42024-07-12
CVE-2024-6023 [HIGH] CWE-352 CVE-2024-6023: The ContentLock WordPress plugin through 1.0.3 does not have CSRF check in place when adding emails,
The ContentLock WordPress plugin through 1.0.3 does not have CSRF check in place when adding emails, which could allow attackers to make a logged in admin perform such action via a CSRF attack
nvd
CVE-2024-6024HIGHCVSS 8.8fixed in 1.0.42024-07-12
CVE-2024-6024 [HIGH] CWE-352 CVE-2024-6024: The ContentLock WordPress plugin through 1.0.3 does not have CSRF check in place when deleting group
The ContentLock WordPress plugin through 1.0.3 does not have CSRF check in place when deleting groups or emails, which could allow attackers to make a logged in admin remove them via a CSRF attack
nvd
CVE-2024-6022HIGHCVSS 8.8fixed in 1.0.42024-07-12
CVE-2024-6022 [HIGH] CWE-352 CVE-2024-6022: The ContentLock WordPress plugin through 1.0.3 does not have CSRF check in place when updating its s
The ContentLock WordPress plugin through 1.0.3 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack
nvd