Skip to content
Sign in Sign up
JA EN FR
SecPulse
Unrated

reCAPTCHA Jetpack <= 0.2.2 - Settings Update via CSRF

CVE-2024-3940 First seen on SecPulse
Original description The description as published by the source.

The reCAPTCHA Jetpack WordPress plugin through 0.2.2 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

References

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details