CVE-2024-3405

Name of the Vulnerable Software and Affected Versions WP Prayer WordPress plugin versions 2.0.9 and earlier

Description The issue is related to the lack of a CSRF check when updating settings, which could allow attackers to make a logged-in admin change them via a CSRF attack.

Recommendations For WP Prayer WordPress plugin versions 2.0.9 and earlier, update to a version that includes a CSRF check for settings updates. At the moment, there is no information about a newer version that contains a fix for this vulnerability.