CVE-2024-1306: Smart Forms < 2.6.94 - Edit Entries via CSRF
Published Apr 15, 2024
·Updated
The Smart Forms WordPress plugin before 2.6.94 does not have CSRF checks in some places, which could allow attackers to make logged-in users perform unwanted actions via CSRF attacks, such as editing entries, and we consider it a medium risk.
Affected Software
2 affected components
Smart Forms Smart Forms<2.6.94
RedNao Smart Forms WordPress<2.6.94
Event History
Apr 15, 2024
CVE Published
via MITRE·05:00 AM
Data Sourced
via MITRE·05:00 AM
DescriptionWeakness
Data Sourced
via NVD·05:15 AM
DescriptionSeverity
Frequently Asked Questions
1
What is the severity of CVE-2024-1306?
CVE-2024-1306 is considered a medium risk vulnerability.
2
How do I fix CVE-2024-1306?
To fix CVE-2024-1306, update the Smart Forms plugin to version 2.6.94 or later.
3
What kind of attacks can CVE-2024-1306 facilitate?
CVE-2024-1306 can facilitate CSRF attacks, allowing attackers to make logged-in users perform unwanted actions.
4
Which versions of Smart Forms are affected by CVE-2024-1306?
CVE-2024-1306 affects all versions of Smart Forms before 2.6.94.
5
Who is at risk due to CVE-2024-1306?
Users of the Smart Forms WordPress plugin prior to version 2.6.94 are at risk due to CVE-2024-1306.