CVE-2024-8245
GamiPress - Reset User <= 1.0.0 - GamiPress User Data Removal via CSRF
The GamiPress WordPress plugin before 1.0.1 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack
CVSS 3.1 · 4.3 Medium
EPSS < 1%
KEV · Not listed
Vendors
Products