Approved changes feed: RSS · Atom
cpe:2.3:a:goprayer:wp_prayer:*:*:*:*:*:wordpress:*:*
part: a version: * update: *
| Vendor | Goprayer (d95d73d5-2f5e-5a24-b209-c68bcb88ca27) |
|---|---|
| Product | Wp Prayer (11176151-29e9-59ff-b177-4abd9d8e0f1e) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | wordpress |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-4751 |
vulnerable | 2026-06-08 06:50:18.556506 |
WP Prayer II <= 2.4.7 - Settings Update via CSRF
The WP Prayer II WordPress plugin through 2.4.7 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack
Published: 2024-06-14T06:00:05.079Z
Updated: 2024-08-09T19:03:15.559Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-3407 |
vulnerable | 2026-06-08 06:41:53.258253 |
WP Prayer <= 2.0.9 - Arbitrary Prayer Deletion via CSRF
The WP Prayer WordPress plugin through 2.0.9 does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks
Published: 2024-05-15T06:00:03.079Z
Updated: 2024-08-01T20:12:06.634Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-3406 |
vulnerable | 2026-06-08 06:41:53.256545 |
WP Prayer <= 2.0.9 - Email Settings Update via CSRF
The WP Prayer WordPress plugin through 2.0.9 does not have CSRF check in place when updating its email settings, which could allow attackers to make a logged in admin change them via a CSRF attack
Published: 2024-05-15T06:00:02.589Z
Updated: 2026-01-09T20:43:50.052Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-3405 |
vulnerable | 2026-06-08 06:41:53.255099 |
WP Prayer <= 2.0.9 - Settings Update via CSRF
The WP Prayer WordPress plugin through 2.0.9 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack
Published: 2024-05-15T06:00:02.337Z
Updated: 2025-03-14T00:47:25.800Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-25705 |
vulnerable | 2026-06-08 05:56:09.672619 |
WordPress WP Prayer Plugin <= 1.9.6 is vulnerable to Cross Site Scripting (XSS)
MEDIUM (5.9)
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Go Prayer WP Prayer plugin <= 1.9.6 versions.
Published: 2023-04-07T12:33:48.818Z
Updated: 2026-04-28T16:08:09.602Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-4412 |
vulnerable | 2026-06-08 05:38:09.373109 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-24313 |
vulnerable | 2026-06-08 05:30:04.167055 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.