CVE-2024-2969

The WP-Eggdrop plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 0.1. This is due to missing or incorrect nonce validation on the wpegg_updateOptions() function. This makes it possible for unauthenticated attackers to update the plugin's settings via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.

• CWE-352
• CWE-352

• https://plugins.trac.wordpress.org/browser/wp-eggdrop/trunk/wp-eggdrop.php#L215Product
• https://www.wordfence.com/threat-intel/vulnerabilities/id/2cd509f7-100a-4f28-8d5a-b6b906456c52?source=cveThird Party Advisory
• https://plugins.trac.wordpress.org/browser/wp-eggdrop/trunk/wp-eggdrop.php#L215Product
• https://www.wordfence.com/threat-intel/vulnerabilities/id/2cd509f7-100a-4f28-8d5a-b6b906456c52?source=cveThird Party Advisory

Published

Mar 29, 2024

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-2967The Guest posting / Frontend Posting wordpress plugin – WP F…4.4
• CVE-2024-29671Buffer Overflow vulnerability in NEXTU FLATA AX1500 Router v…9.8
• CVE-2024-29672Directory Traversal vulnerability in zly2006 Reden before v.…8.8
• CVE-2024-2968The WP-Eggdrop plugin for WordPress is vulnerable to Stored …4.8
• CVE-2024-29684DedeCMS v5.7 was discovered to contain a Cross-Site Request …9.8
• CVE-2024-29686Server-side Template Injection (SSTI) vulnerability in Winte…7.2
• CVE-2024-2970The News Wall plugin for WordPress is vulnerable to Cross-Si…4.3
• CVE-2024-2971Out-of-bounds array write in Xpdf 4.05 and earlier, triggere…5.5
• CVE-2024-2972The Floating Chat Widget: Contact Chat Icons, WhatsApp, Tele…3.8
• CVE-2024-29720An issue in Terra Informatica Software, Inc Sciter v.4.4.7.0…5.5
• CVE-2024-29723SQL injection vulnerabilities in SportsNET affecting version…9.8
• CVE-2024-29724SQL injection vulnerabilities in SportsNET affecting version…9.8