CVE-2024-6412: HTML Forms – Simple WordPress Forms Plugin < 1.3.34 - Bulk Delete via CSRF
Published Jul 31, 2024
·Updated
The HTML Forms WordPress plugin before 1.3.34 does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks
Affected Software
2 affected components
WordPress HTML Forms<1.3.34
Linksoftwarellc Html Forms Wordpress<1.3.34
Event History
Jul 31, 2024
CVE Published
via MITRE·06:00 AM
Data Sourced
via MITRE·06:00 AM
DescriptionWeakness
Data Sourced
via NVD·06:15 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2024-6412?
CVE-2024-6412 is classified as a moderate severity vulnerability due to its potential for CSRF attacks.
2
How do I fix CVE-2024-6412?
To fix CVE-2024-6412, update the WordPress HTML Forms plugin to version 1.3.34 or later.
3
What type of vulnerability is CVE-2024-6412?
CVE-2024-6412 is a Cross-Site Request Forgery (CSRF) vulnerability.
4
Who is affected by CVE-2024-6412?
Users of the WordPress HTML Forms plugin versions prior to 1.3.34 are affected by CVE-2024-6412.
5
What actions can attackers perform due to CVE-2024-6412?
Attackers can exploit CVE-2024-6412 to make logged-in users perform unwanted actions on affected WordPress installations.