Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-jwv3-p6w3-6prm

Опубликовано: 30 авг. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 6.5

Описание

The GDPR Cookie Compliance (CCPA, DSGVO, Cookie Consent) WordPress plugin before 4.12.5 does not have proper CSRF checks when managing its license, which could allow attackers to make logged in admins update and deactivate the plugin's license via CSRF attacks

The GDPR Cookie Compliance (CCPA, DSGVO, Cookie Consent) WordPress plugin before 4.12.5 does not have proper CSRF checks when managing its license, which could allow attackers to make logged in admins update and deactivate the plugin's license via CSRF attacks

EPSS

Процентиль: 32%
0.00122
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-352

Связанные уязвимости

CVSS3: 6.5
nvd
больше 2 лет назад

The GDPR Cookie Compliance (CCPA, DSGVO, Cookie Consent) WordPress plugin before 4.12.5 does not have proper CSRF checks when managing its license, which could allow attackers to make logged in admins update and deactivate the plugin's license via CSRF attacks

EPSS

Процентиль: 32%
0.00122
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-352