Vulnerability — CVE-2024-3971

CVE-2024-3971

Reference to the description:: https://nvd.nist.gov/vuln/detail/CVE-2024-3971
Description:: The Similarity WordPress plugin through 3.0 does not have CSRF check in place when resetting its settings, which could allow attackers to make a logged in admin reset them via a CSRF attack
Last updated date:: 07/29/2024

Type:: exploit
Confidence:: HIGH
Date of publishing:: 07/29/2024
Reference url to background: https://wpscan.com/vulnerability/5dec5719-105d-4989-a97f-bda04d223322/