Vulnerability Database

309,364

Total vulnerabilities in the database

CVE-2024-12282

The WordPress连接微博 WordPress plugin through 2.5.6 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add Stored XSS payloads via a CSRF attack.

  • Published: May 15, 2025
  • Updated: Nov 16, 2025
  • CVE: CVE-2024-12282
  • Severity: Medium
  • Exploit:

CVSS v3:

  • Severity: Medium
  • Score: 6.1
  • AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

CWEs:

Software From Fixed in
smyx / wp-connect - 2.5.6.x