Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2022-29414

Опубликовано: 29 апр. 2022
Источник: nvd
CVSS3: 5.4
CVSS3: 5.4
CVSS2: 5.8
EPSS Низкий

Описание

Multiple (13x) Cross-Site Request Forgery (CSRF) vulnerabilities in WPKube's Subscribe To Comments Reloaded plugin <= 211130 on WordPress allows attackers to clean up Log archive, download system info file, plugin system settings, plugin options settings, generate a new key, reset all options, change notifications settings, management page settings, comment form settings, manage subscriptions > mass update settings, manage subscriptions > add a new subscription, update subscription, delete Subscription.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:wpkube:subscribe_to_comments_reloaded:*:*:*:*:*:wordpress:*:*
Версия до 211130 (включая)

EPSS

Процентиль: 27%
0.00098
Низкий

5.4 Medium

CVSS3

5.4 Medium

CVSS3

5.8 Medium

CVSS2

Дефекты

CWE-352

Связанные уязвимости

CVSS3: 5.4
github
почти 4 года назад

Multiple (13x) Cross-Site Request Forgery (CSRF) vulnerabilities in WPKube's Subscribe To Comments Reloaded plugin <= 211130 on WordPress allows attackers to clean up Log archive, download system info file, plugin system settings, plugin options settings, generate a new key, reset all options, change notifications settings, management page settings, comment form settings, manage subscriptions > mass update settings, manage subscriptions > add a new subscription, update subscription, delete Subscription.

EPSS

Процентиль: 27%
0.00098
Низкий

5.4 Medium

CVSS3

5.4 Medium

CVSS3

5.8 Medium

CVSS2

Дефекты

CWE-352