Approved changes feed: RSS · Atom

cpe:2.3:a:goprayer:wp_prayer:-:*:*:*:*:wordpress:*:*

part: a version: - update: *

VendorGoprayer (d95d73d5-2f5e-5a24-b209-c68bcb88ca27)
ProductWp Prayer (11176151-29e9-59ff-b177-4abd9d8e0f1e)
Edition*
Language*
Software edition*
Target softwarewordpress
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-3406 vulnerable 2026-06-08 06:41:53.256460 WP Prayer <= 2.0.9 - Email Settings Update via CSRF
The WP Prayer WordPress plugin through 2.0.9 does not have CSRF check in place when updating its email settings, which could allow attackers to make a logged in admin change them via a CSRF attack
Published: 2024-05-15T06:00:02.589Z
Updated: 2026-01-09T20:43:50.052Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.