VYPR
Unrated severityNVD Advisory· Published May 27, 2024· Updated Mar 25, 2025

KKProgressbar2 Free <= 1.1.4.2 - Progress Bar Deletion via CSRF

CVE-2024-4535

Description

The KKProgressbar2 Free WordPress plugin through 1.1.4.2 does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks

Affected products

1

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

1

News mentions

0

No linked articles in our index yet.