← Database

CVE-2024-4969

MEDIUM CVSS: 4.3 Published: 2024-06-21 Modified: 2026-06-17

Description

The Widget Bundle WordPress plugin through 2.0.0 does not have CSRF checks when logging Widgets, which could allow attackers to make logged in admin enable/disable widgets via a CSRF attack

Affected Platforms

Devnath Verma Widget Bundle

Weakness Type

CWE-352

References