Read the docs

Go Prayer

Records8All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

Go Prayer records in CISA KEV

No Go Prayer vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Wp Prayer 6 records HIGH Prayer 2 records MEDIUM

Records

2 records in Prayer · all components

TI-2024-04167 CVE-2024-4480 · GHSA-mgqc-jwxc-fx8x

WP Prayer II <= 2.4.7 - Email Settings Update via CSRF

Priority MEDIUM 60

The WP Prayer II WordPress plugin through 2.4.7 does not have CSRF check in place when updating its email settings, which could allow attackers to make a logged in admin change them via a CSRF attack

CVSS 3.1MEDIUM 6.1 Local High privileges User interaction EPSS 0.00197 Published 2024-06-14 No fix listed CWE-352
TI-2024-04424 CVE-2024-4751 · GHSA-3q86-v8qf-7gw8

WP Prayer II <= 2.4.7 - Settings Update via CSRF

Priority MEDIUM 53

The WP Prayer II WordPress plugin through 2.4.7 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00211 Published 2024-06-14 No fix listed CWE-352
Open these records in search →