← Database

CVE-2024-9689

MEDIUM CVSS: 4.3 Published: 2024-11-05 Modified: 2026-06-17

Description

The Post From Frontend WordPress plugin through 1.0.0 does not have CSRF check when deleting posts, which could allow attackers to make logged in admin perform such action via a CSRF attack

Affected Platforms

Shaon Post From Frontend

Weakness Type

CWE-352

References