CVE-2024-4758

Muslim Prayer Time BD <= 2.4 - Settings Reset via CSRF

CVSS 7.6 HIGHEPSS 0.3%

Vexday Risk Score

21Low

SSVC decision (CISA)

Track

No exploitation signal → monitor

CVSS 7.6EPSS 0.3%KEV nãoPoC —Nuclei —Metasploit —Patch —

Lifecycle

26 Jun 2024Published on NVD

Recommendation: Monitor — no exploitation signal at the moment.

The Muslim Prayer Time BD WordPress plugin through 2.4 does not have CSRF check in place when reseting its settings, which could allow attackers to make a logged in admin reset them via a CSRF attack

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:L

Affected products

Unknown · Muslim Prayer Time BD

References

https://wpscan.com/vulnerability/64ec57a5-35d8-4c69-bdba-096c2245a0db/