Approved changes feed: RSS · Atom

cpe:2.3:a:wp-master:azan:*:*:*:*:*:wordpress:*:*

part: a version: * update: *

VendorWp Master (bf261b67-0827-5b65-a85f-1fa991576b31)
ProductAzan (59121c0e-b12e-5bba-9033-74d36834c6a2)
Edition*
Language*
Software edition*
Target softwarewordpress
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/wp-plugins/azan purl2cpe 2026-06-01 10:11:48.426333
pkg:github/wpplugins/azan purl2cpe 2026-06-01 10:11:48.426335

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-3993 vulnerable 2026-06-08 06:43:52.073259 AZAN Plugin <= 0.6 - Stored XSS via CSRF
The AZAN Plugin WordPress plugin through 0.6 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add Stored XSS payloads via a CSRF attack
Published: 2024-06-14T06:00:04.102Z
Updated: 2024-08-01T20:26:57.248Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.