Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-cwpg-2qv7-g34j

Опубликовано: 13 июл. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 8.1

Описание

The CM Email Registration Blacklist and Whitelist WordPress plugin before 1.4.9 does not have CSRF check when adding or deleting an item from the blacklist or whitelist, which could allow attackers to make a logged in admin add or delete settings from the blacklist or whitelist menu via a CSRF attack

The CM Email Registration Blacklist and Whitelist WordPress plugin before 1.4.9 does not have CSRF check when adding or deleting an item from the blacklist or whitelist, which could allow attackers to make a logged in admin add or delete settings from the blacklist or whitelist menu via a CSRF attack

EPSS

Процентиль: 41%
0.0019
Низкий

8.1 High

CVSS3

Дефекты

CWE-352

Связанные уязвимости

CVSS3: 8.1
nvd
больше 1 года назад

The CM Email Registration Blacklist and Whitelist WordPress plugin before 1.4.9 does not have CSRF check when adding or deleting an item from the blacklist or whitelist, which could allow attackers to make a logged in admin add or delete settings from the blacklist or whitelist menu via a CSRF attack

EPSS

Процентиль: 41%
0.0019
Низкий

8.1 High

CVSS3

Дефекты

CWE-352