← Back to CVE List

CVE-2024-1962

Published: 2024-03-25T05:15Z
Last Modified: 2025-04-01T17:10Z
Source: MITRE CVE List
License: MITRE-CVE-TOS
The CM Download Manager WordPress plugin before 2.9.1 does not have CSRF checks in some places, which could allow attackers to make logged in admins edit downloads via a CSRF attack > MITRE Terms of Use apply – see LICENSE‑MITRE.txt