← Back to CVE List

CVE-2024-1231

Published: 2024-03-25T05:15Z
Last Modified: 2025-04-01T17:20Z
Source: MITRE CVE List
License: MITRE-CVE-TOS
The CM Download Manager WordPress plugin before 2.9.0 does not have CSRF checks in some places, which could allow attackers to make logged in admins unpublish downloads via a CSRF attack > MITRE Terms of Use apply – see LICENSE‑MITRE.txt