Vulnerabilities > Simple Bitcoin Faucets Project > Simple Bitcoin Faucets > 1.0.16

DATE CVE VULNERABILITY TITLE RISK
2022-09-26 CVE-2022-3024 Unspecified vulnerability in Simple Bitcoin Faucets Project Simple Bitcoin Faucets
The Simple Bitcoin Faucets WordPress plugin through 1.7.0 does not have any authorisation and CSRF in an AJAX action, allowing any authenticated users, such as subscribers to call it and add/delete/edit Bonds.
network
low complexity
simple-bitcoin-faucets-project
5.4