CVE-2024-10634
15.05.2025, 20:15
The Nokaut Offers Box WordPress plugin through 1.4.0 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin reset the Nokaut Offers Box WordPress plugin through 1.4.0 via a CSRF attack
| Vendor | Product | Version |
|---|---|---|
| nokautpl | nokaut_offers_box | 𝑥 ≤ 1.4.0 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration