PT-2025-21505 · WordPress · The Joy Of Text Lite

Published

2024-10-04

·

Updated

2025-05-15

·

CVE-2024-7984

CVSS v3.1

4.3

Medium

VectorAV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Name of the Vulnerable Software and Affected Versions: The Joy Of Text Lite WordPress plugin versions 2.3.1 and earlier
Description: The issue is related to the lack of a CSRF check when updating settings, which could allow attackers to make a logged-in admin change them via a CSRF attack.
Recommendations: For The Joy Of Text Lite WordPress plugin versions 2.3.1 and earlier, update to a version that includes a CSRF check to prevent such attacks.

Exploit

Fix

CSRF

Weakness Enumeration

CWE-352

Related Identifiers

CVE-2024-7984
MGASA-2024-0321

Affected Products

The Joy Of Text Lite