Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-pcmq-5pjg-9prg

Опубликовано: 05 нояб. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 4.8

Описание

The Post From Frontend WordPress plugin through 1.0.0 does not have CSRF check when deleting posts, which could allow attackers to make logged in admin perform such action via a CSRF attack

The Post From Frontend WordPress plugin through 1.0.0 does not have CSRF check when deleting posts, which could allow attackers to make logged in admin perform such action via a CSRF attack

EPSS

Процентиль: 40%
0.00185
Низкий

4.8 Medium

CVSS3

Дефекты

CWE-352

Связанные уязвимости

CVSS3: 4.3
nvd
больше 1 года назад

The Post From Frontend WordPress plugin through 1.0.0 does not have CSRF check when deleting posts, which could allow attackers to make logged in admin perform such action via a CSRF attack

EPSS

Процентиль: 40%
0.00185
Низкий

4.8 Medium

CVSS3

Дефекты

CWE-352