TI-2024-07403 CVE-2024-7984 · GHSA-x9mr-w276-h3c2Joy Of Text Lite – SMS messaging for WordPress <= 2.3.1 - Settings Update via CSRFPriority MEDIUM 53The Joy Of Text Lite WordPress plugin through 2.3.1 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attackCVSS 3.1MEDIUM 4.3· Network · No auth · User interaction · EPSS 0.00187 · Published 2025-05-15 · No fix listed CWE-352
