CVE-2024-6271: Community Events < 1.5 - Event Deletion via CSRF
Published Jul 22, 2024
·Updated
The Community Events WordPress plugin before 1.5 does not have CSRF check in place when deleting events, which could allow attackers to make a logged in admin delete arbitrary events via a CSRF attack
Affected Software
1 affected component
Community Events Project Community Events Wordpress<1.5
Event History
Jul 22, 2024
CVE Published
via MITRE·06:00 AM
Data Sourced
via MITRE·06:00 AM
DescriptionWeakness
Data Sourced
via NVD·06:15 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2024-6271?
CVE-2024-6271 has a medium severity rating due to the potential for arbitrary event deletion via CSRF attacks.
2
How do I fix CVE-2024-6271?
To fix CVE-2024-6271, upgrade to Community Events WordPress plugin version 1.5 or later.
3
What kind of attacks can CVE-2024-6271 enable?
CVE-2024-6271 can enable attackers to perform cross-site request forgery (CSRF) attacks to delete arbitrary events.
4
Who is affected by CVE-2024-6271?
CVE-2024-6271 affects users of the Community Events WordPress plugin versions prior to 1.5.
5
Is a patch available for CVE-2024-6271?
Yes, a patch is available in Community Events WordPress plugin version 1.5 to address CVE-2024-6271.