CVE-2024-7984

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2024-7984
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2024-7984.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2024-7984
Downstream
Published
2025-05-15T20:07:12Z
Modified
2026-10-06T02:32:02Z
Severity
  • 4.3 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N CVSS Calculator
Summary
Joy Of Text Lite – SMS messaging for WordPress <= 2.3.1 - Settings Update via CSRF
Details

The Joy Of Text Lite WordPress plugin through 2.3.1 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack

Database specific 
{
    "cna_assigner":  "WPScan",
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/7xxx/CVE-2024-7984.json",
    "unresolved_ranges":  [
        {
            "extracted_events":  [
                {
                    "last_affected":  "2.3.1"
                }
            ],
            "source":  "AFFECTED_FIELD"
        },
        {
            "extracted_events":  [
                {
                    "fixed":  "2.3.1"
                }
            ],
            "source":  "DESCRIPTION"
        }
    ]
}
References

Affected packages

WordPress:Plugin / joy-of-text-lite

Package

Name
joy-of-text-lite

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Last Affected
2.3.1

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2024-7984.json"