← WordPress Vulnerabilities
WordPress security by component

CM Tooltip Glossary – Powerful Glossary Plugin

CM Tooltip Glossary – Powerful Glossary Plugin is a WordPress component with 1 published CVE record in this archive. The latest tracked vulnerability was published May 02, 2024; the highest published CVSS base score is 4.3.

Plugin slug: cm-tooltip-glossary-powerful-glossary-plugin

CVE-2024-4086: CM Tooltip Glossary – Powerful Glossary Plugin: Cross-site request forgery

CM Tooltip Glossary – Powerful Glossary Plugin is affected by cross-site request forgery. The vulnerable path is reachable without authentication. Exploitation relies on a signed-in privileged user submitting an attacker-controlled request. The public source does not disclose the vulnerable endpoint, action, parameter or function, so the precise input path remains unknown.

PublishedMay 02, 2024
Safe version guidanceSee mitigation notes
Published vulnerabilities for cm-tooltip-glossary-powerful-glossary-plugin
Safe version
May 02, 2024 CVE-2024-4086
CM Tooltip Glossary – Powerful Glossary Plugin: Cross-site request forgery
CM Tooltip Glossary – Powerful Glossary Plugin is affected by cross-site request forgery. The vulnerable path is reachable without authentication. Exploitation relies on a signed-in privileged user submitting an attacker-controlled request. The public source does not disclose the vulnerable endpoint, action, parameter or function, so the precise input path remains unknown.
See mitigation notes
CVE4.3
NVDPending