VYPR

Theperfectweddingnl Widget

by WordPress

Source repositories

CVEs (1)

  • CVE-2024-12322HigJan 7, 2025
    risk 0.50cvss 8.8epss 0.00

    The ThePerfectWedding.nl Widget plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.8. This is due to missing or incorrect nonce validation on the 'update_option' function. This makes it possible for unauthenticated attackers…