Approved changes feed: RSS · Atom
cpe:2.3:a:unknown:wp_prayer:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Unknown (668ca391-a6cc-5e33-879b-83885214de33) |
|---|---|
| Product | Wp Prayer (14009684-6227-5565-9d90-12f9cd1e0eed) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-3407 |
vulnerable | 2026-06-08 06:41:53.258226 |
WP Prayer <= 2.0.9 - Arbitrary Prayer Deletion via CSRF
The WP Prayer WordPress plugin through 2.0.9 does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks
Published: 2024-05-15T06:00:03.079Z
Updated: 2024-08-01T20:12:06.634Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-3406 |
vulnerable | 2026-06-08 06:41:53.256518 |
WP Prayer <= 2.0.9 - Email Settings Update via CSRF
The WP Prayer WordPress plugin through 2.0.9 does not have CSRF check in place when updating its email settings, which could allow attackers to make a logged in admin change them via a CSRF attack
Published: 2024-05-15T06:00:02.589Z
Updated: 2026-01-09T20:43:50.052Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-3405 |
vulnerable | 2026-06-08 06:41:53.254528 |
WP Prayer <= 2.0.9 - Settings Update via CSRF
The WP Prayer WordPress plugin through 2.0.9 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack
Published: 2024-05-15T06:00:02.337Z
Updated: 2025-03-14T00:47:25.800Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-24313 |
vulnerable | 2026-06-08 05:30:04.166304 |
WP Prayer < 1.6.2 - Authenticated Stored Cross-Site Scripting (XSS)
The WP Prayer WordPress plugin before 1.6.2 provides the functionality to store requested prayers/praises and list them on a WordPress website. These stored prayer/praise requests can be listed by using the WP Prayer engine. An authenticated WordPress user with any role can fill in the form to request a prayer. The form to request prayers or praises have several fields. The 'prayer request' and 'praise request' fields do not use proper input validation and can be used to store XSS payloads.
Published: 2021-06-01T11:33:30.000Z
Updated: 2024-08-03T19:28:23.788Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.