Input validation vulnerability in Pray For Me 1.0.4

The Pray For Me plugin on WordPress has a security issue called Cross-Site Request Forgery. This can happen in versions 1.0.4 or below because the plugin does not properly check for a special code that helps protect against fake requests. This means that someone who is not logged in to the website could change the plugin’s settings if they can trick the person in charge of the website into doing something, like clicking on a link.

Detected in:

Pray For Me open vulnerable versions: >= * <= 1.0.4

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

Is this information incorrect? Please leave us a message.