Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-h6px-5m2g-9p4v

Опубликовано: 14 нояб. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 6.5

Описание

The reSmush.it : the only free Image Optimizer & compress plugin WordPress plugin before 0.4.4 does not perform CSRF checks for any of its AJAX actions, allowing an attackers to trick logged in users to perform various actions on their behalf on the site.

The reSmush.it : the only free Image Optimizer & compress plugin WordPress plugin before 0.4.4 does not perform CSRF checks for any of its AJAX actions, allowing an attackers to trick logged in users to perform various actions on their behalf on the site.

EPSS

Процентиль: 35%
0.00144
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-352

Связанные уязвимости

CVSS3: 6.5
nvd
около 3 лет назад

The reSmush.it : the only free Image Optimizer & compress plugin WordPress plugin before 0.4.4 does not perform CSRF checks for any of its AJAX actions, allowing an attackers to trick logged in users to perform various actions on their behalf on the site.

EPSS

Процентиль: 35%
0.00144
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-352