Unrated

XV Random Quotes <= 1.40 - Settings Reset via CSRF

CVE-2024-13580 First seen on SecPulse Mar 11, 2025

Original description The description as published by the source.

The XV Random Quotes WordPress plugin through 1.40 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin reset them via a CSRF attack

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

References

advisory github.com
advisory nvd.nist.gov
report wpscan.com

Key facts

Severity: Unrated
Published: Mar 11, 2025
First seen on SecPulse: Mar 11, 2025

NVD OSV

Detection sources

OSV.dev (Open Source Vulnerabilities)Oct 20, 20:03