Analysis and contextual insights are available on OpenCVE Cloud.
No vendor fix or workaround currently provided.
Additional remediation guidance may be available on OpenCVE Cloud.
Tracking
Sign in to view the affected projects.
| Source | ID | Title |
|---|---|---|
EUVD |
EUVD-2025-15252 | The Ntz Antispam WordPress plugin through 2.0e does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack |
Tue, 27 May 2025 20:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Ionutstaicu
Ionutstaicu ntz Atispam |
|
| Weaknesses | CWE-352 | |
| CPEs | cpe:2.3:a:ionutstaicu:ntz_atispam:*:*:*:*:*:wordpress:*:* | |
| Vendors & Products |
Ionutstaicu
Ionutstaicu ntz Atispam |
Tue, 20 May 2025 20:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Metrics |
cvssV3_1
|
Thu, 15 May 2025 20:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | The Ntz Antispam WordPress plugin through 2.0e does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack | |
| Title | Ntz Antispam <= 2.0e - Settings Update via CSRF | |
| References |
|
Status: PUBLISHED
Assigner: WPScan
Published:
Updated: 2025-05-20T19:20:01.105Z
Reserved: 2024-08-22T13:47:58.717Z
Link: CVE-2024-8094
Updated: 2025-05-19T20:24:41.430Z
Status : Analyzed
Published: 2025-05-15T20:15:57.843
Modified: 2025-05-27T19:58:28.090
Link: CVE-2024-8094
No data.
OpenCVE Enrichment
No data.
EUVD