high8.8Public exploit code
CVE-2024-6244
The PZ Frontend Manager WordPress plugin before 1.0.6 does not have CSRF checks in some places, which could allow attackers to make logged in users perform unw…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- PZ Frontend Manager WordPress Plugin 1.0.5 - Cross Site Request Forgery (CSRF)2025-04-09 · webapps · php
Impact
The PZ Frontend Manager WordPress plugin before 1.0.6 does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Projectzealous | Pz Frontend Manager | before 1.0.6 |