CVE-2024-51688: WordPress FraudLabs Pro SMS Verification plugin <= 1.10.1 - CSRF to Stored XSS vulnerability
Cross-Site Request Forgery (CSRF) vulnerability in fraudlabspro FraudLabs Pro SMS Verification fraudlabs-pro-sms-verification allows Stored XSS.This issue affects FraudLabs Pro SMS Verification: from n/a through <= 1.10.1.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2024-51688?
CVE-2024-51688 is identified as a high severity vulnerability due to its Cross-Site Request Forgery (CSRF) and Stored XSS implications in the affected software.
How do I fix CVE-2024-51688?
To fix CVE-2024-51688, update the FraudLabs Pro SMS Verification plugin to version 1.10.2 or later.
Which versions are affected by CVE-2024-51688?
CVE-2024-51688 affects FraudLabs Pro SMS Verification versions up to and including 1.10.1.
What types of attacks can CVE-2024-51688 enable?
CVE-2024-51688 can enable attackers to perform CSRF attacks leading to stored Cross-Site Scripting (XSS) vulnerabilities.
Is there a workaround for CVE-2024-51688?
As a temporary workaround for CVE-2024-51688, it's recommended to disable or uninstall the FraudLabs Pro SMS Verification plugin if upgrading is not immediately possible.