WordPress security by component

ContentLock

Plugin description

ContentLock is a WordPress component with 3 published CVE records in this archive. The latest tracked vulnerability was published Jul 12, 2024; the highest CVE/CNA score is 8.8.

Plugin slug: contentlock

Latest vulnerability

CVE-2024-6024: ContentLock: Cross-site request forgery

ContentLock is affected by cross-site request forgery. Exposure depends on how the affected operation is made reachable by the site. Exploitation relies on a signed-in privileged user submitting an attacker-controlled request.

PublishedJul 12, 2024

Safe version guidanceSee mitigation notes

		Safe version
Jul 12, 2024	CVE-2024-6024 ContentLock: Cross-site request forgery ContentLock is affected by cross-site request forgery. Exposure depends on how the affected operation is made reachable by the site. Exploitation relies on a signed-in privileged user submitting an attacker-controlled request.	See mitigation notes	CVE8.8 NVDPending
Jul 12, 2024	CVE-2024-6023 ContentLock: Cross-site request forgery ContentLock is affected by cross-site request forgery. Exposure depends on how the affected operation is made reachable by the site. Exploitation relies on a signed-in privileged user submitting an attacker-controlled request.	See mitigation notes	CVE8.8 NVD8.8
Jul 12, 2024	CVE-2024-6022 ContentLock: Cross-site request forgery ContentLock is affected by cross-site request forgery. Exposure depends on how the affected operation is made reachable by the site. Exploitation relies on a signed-in privileged user submitting an attacker-controlled request.	See mitigation notes	CVE8.8 NVD8.8