CVE-2024-3824

Name of the Vulnerable Software and Affected Versions Base64 Encoder/Decoder WordPress plugin versions 0.9.2 and earlier PHP versions prior to 8.0.30 PHP versions prior to 8.1.22 PHP versions prior to 8.2.8

Description The issue concerns a lack of CSRF check in the Base64 Encoder/Decoder WordPress plugin, allowing attackers to reset settings via a CSRF attack. Additionally, there is an issue in PHP when loading phar files.

Recommendations For the Base64 Encoder/Decoder WordPress plugin version 0.9.2 and earlier, consider disabling the settings reset functionality until a patch is available. For PHP versions prior to 8.0.30, update to version 8.0.30 or later. For PHP versions prior to 8.1.22, update to version 8.1.22 or later. For PHP versions prior to 8.2.8, update to version 8.2.8 or later.