Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-4gx2-hh4v-ff58

Опубликовано: 27 мар. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 4.3

Описание

The HT Slider For Elementor WordPress plugin before 1.4.0 does not have CSRF check when activating plugins, which could allow attackers to make logged in admins activate arbitrary plugins present on the blog via a CSRF attack

The HT Slider For Elementor WordPress plugin before 1.4.0 does not have CSRF check when activating plugins, which could allow attackers to make logged in admins activate arbitrary plugins present on the blog via a CSRF attack

EPSS

Процентиль: 27%
0.00097
Низкий

4.3 Medium

CVSS3

Дефекты

CWE-352

Связанные уязвимости

CVSS3: 4.3
nvd
почти 3 года назад

The HT Slider For Elementor WordPress plugin before 1.4.0 does not have CSRF check when activating plugins, which could allow attackers to make logged in admins activate arbitrary plugins present on the blog via a CSRF attack

EPSS

Процентиль: 27%
0.00097
Низкий

4.3 Medium

CVSS3

Дефекты

CWE-352