A AegiFlow
HIGHCVSS 8.8

CVE-2024-0858

CVE-2024-0858 updated by NVD

Modified
2026-10-18
Sources
nvd

Summary

The Innovs HR WordPress plugin before 1.0.3.7.1 does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks such as adding them as employees.

Affected packages

EcosystemPackageAffected versionsFixed versions
WordPressinnovs_hr[object Object]—

References

Includes data from the National Vulnerability Database (NIST). NVD data is in the public domain; this page is not endorsed by NIST.

CVE® is a registered trademark of The MITRE Corporation. CVE content reproduced under the CVE Terms of Use; copyright designation © MITRE.