{"id":"CVE-2024-13580","summary":"XV Random Quotes \u003c= 1.40 - Settings Reset via CSRF","details":"The XV Random Quotes WordPress plugin through 1.40 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin reset them via a CSRF attack","modified":"2026-08-12T03:51:20.550930484Z","published":"2025-03-11T06:00:08.551Z","database_specific":{"cna_assigner":"WPScan","osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/13xxx/CVE-2024-13580.json","unresolved_ranges":[{"extracted_events":[{"last_affected":"1.40"}],"source":"AFFECTED_FIELD"},{"extracted_events":[{"fixed":"1.40"}],"source":"DESCRIPTION"}]},"references":[{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/13xxx/CVE-2024-13580.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2024-13580"},{"type":"EVIDENCE","url":"https://wpscan.com/vulnerability/48cffe03-adcf-4da2-a331-464ae511a805/"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/xavivars/xv-random-quotes","events":[{"introduced":"0"},{"last_affected":"383bc42962e2f9f678cbd7f9a42901dee60a514a"}],"database_specific":{"cpe":"cpe:2.3:a:xavivars:xv_random_quotes:*:*:*:*:*:wordpress:*:*","extracted_events":[{"introduced":"0"},{"last_affected":"1.40"}],"source":"CPE_RANGE"}}],"versions":["1.40","1.38","1.37","1.36","1.35","1.34","1.32","1.31","1.30","1.29","1.28","1.27","1.26","1.25","1.24","1.22","1.21","1.20","1.12","1.11","XV-Random-Quotes","1.10","StrayQuotesZ","1.9.9z3","1.9.9","1.9.7","1.9.4","1.9.5","1.9.6","1.9.2","1.8.9","1.9.0","1.8.6","1.8.5","1.8.2","1.8.3","1.7.9","1.7.9_fix","1.8.1","1.7.1","1.7.3","1.7.4","1.7.5","1.7.6","1.7.7","1.7.8","1.7","1.53","1.6","1.6.2","1.6.3","1.6.4","1.51","1.52","1.50","1.48","1.3","1.2","1.0","1.1"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-13580.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N"}]}