Medium severity4.3NVD Advisory· Published Jul 30, 2024· Updated Jun 17, 2026

CVE-2024-5808

Description

The WP Ajax Contact Form WordPress plugin through 2.2.2 does not have CSRF check in place when deleting emails from the email list, which could allow attackers to make a logged in admin perform such action via a CSRF attack

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

WordPress/WP Ajax Contact Formllm-create
Range: <=2.2.2
WordPress/Fws Ajax Contact Formcpe-rescue
Package: https://wordpress.org/plugins/fws-ajax-contact-form
Masdiblogs/Wp Ajax Contact Form
cpe:2.3:a:masdiblogs:wp_ajax_contact_form:*:*:*:*:*:wordpress:*:*
Range: <=2.2.2

Patches

Vulnerability mechanics

References

wpscan.com/vulnerability/1783bbce-3cc3-4a7e-a491-b713cee8278b/nvdExploitThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.280
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000