Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-hfgc-xxrj-48m3

Опубликовано: 12 авг. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 5.4

Описание

The wp-cart-for-digital-products WordPress plugin before 8.5.6 does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks

The wp-cart-for-digital-products WordPress plugin before 8.5.6 does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks

EPSS

Процентиль: 59%
0.00384
Низкий

5.4 Medium

CVSS3

Дефекты

CWE-352

Связанные уязвимости

CVSS3: 5.4
nvd
больше 1 года назад

The wp-cart-for-digital-products WordPress plugin before 8.5.6 does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks

EPSS

Процентиль: 59%
0.00384
Низкий

5.4 Medium

CVSS3

Дефекты

CWE-352