CVE-2024-11417

The dejure.org Vernetzungsfunktion plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.97.5. This is due to missing or incorrect nonce validation on the djo_einstellungen_menue() function. This makes it possible for unauthenticated attackers to update settings and inject malicious web scripts via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.

• CWE-352

• https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3206444%40dejureorg-vernetzungsfunktion&new=3206444%40dejureorg-vernetzungsfunktion&sfp_email=&sfph_mail=
• https://www.wordfence.com/threat-intel/vulnerabilities/id/bfe35762-2cb1-4b62-8865-ab217ff29450?source=cve

Published

Dec 12, 2024

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-11411The Spotlightr plugin for WordPress is vulnerable to Stored …6.4
• CVE-2024-11412The Shine PDF Embeder plugin for WordPress is vulnerable to …6.4
• CVE-2024-11413The HostFact bestelformulier integratie plugin for WordPress…6.4
• CVE-2024-11414The RecipePress Reloaded plugin for WordPress is vulnerable …6.4
• CVE-2024-11415The WP-Orphanage Extended plugin for WordPress is vulnerable…8.8
• CVE-2024-11416The WIP Incoming Lite plugin for WordPress is vulnerable to …6.1
• CVE-2024-11418The Additional Order Filters for WooCommerce plugin for Word…6.1
• CVE-2024-11419The Password for WP plugin for WordPress is vulnerable to Cr…6.1
• CVE-2024-1142Path Traversal in Sonatype IQ Server from version 143 allows…5.4
• CVE-2024-11420The Blocksy theme for WordPress is vulnerable to Stored Cros…5.4
• CVE-2024-11421Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMB…
• CVE-2024-11422A maliciously crafted DWFX file, when parsed through Autodes…7.8