Описание
The Visual Form Builder WordPress plugin before 3.0.8 does not enforce nonce checks which could allow attackers to make a logged in admin or editor delete and restore arbitrary form entries via CSRF attacks
Уязвимые конфигурации
Конфигурация 1Версия до 3.0.6 (исключая)
cpe:2.3:a:vfbpro:visual_form_builder:*:*:*:*:*:wordpress:*:*
EPSS
Процентиль: 25%
0.00089
Низкий
8.1 High
CVSS3
5.8 Medium
CVSS2
Дефекты
CWE-352
Связанные уязвимости
CVSS3: 8.1
github
почти 4 года назад
The Visual Form Builder WordPress plugin before 3.0.8 does not enforce nonce checks which could allow attackers to make a logged in admin or editor delete and restore arbitrary form entries via CSRF attacks
EPSS
Процентиль: 25%
0.00089
Низкий
8.1 High
CVSS3
5.8 Medium
CVSS2
Дефекты
CWE-352