← Back

Dd32

dd32

1 CVE • 1 product

Products (1)

Click to collapse
Toggle
Core Control
core_control

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Dd32
1Core Control
Jun 17, 2026
Jan 16, 2024
N/A· v4
4.3 MEDIUM· v3
N/A· v2
The Core Control WordPress plugin through 1.2.1 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack