Описание
Cross-Site Request Forgery (CSRF) vulnerability in WordPlus Better Messages plugin <= 1.9.9.148 at WordPress allows attackers to upload files. File attachment to messages must be activated.
Ссылки
- PatchThird Party Advisory
- Release NotesVendor Advisory
- PatchThird Party Advisory
- Release NotesVendor Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 1.9.9.149 (исключая)
cpe:2.3:a:wordplus:better_messages:*:*:*:*:*:wordpress:*:*
EPSS
Процентиль: 55%
0.00325
Низкий
3.1 Low
CVSS3
4.3 Medium
CVSS3
Дефекты
CWE-352
Связанные уязвимости
CVSS3: 4.3
github
больше 3 лет назад
Cross-Site Request Forgery (CSRF) vulnerability in WordPlus Better Messages plugin <= 1.9.9.148 at WordPress allows attackers to upload files. File attachment to messages must be activated.
EPSS
Процентиль: 55%
0.00325
Низкий
3.1 Low
CVSS3
4.3 Medium
CVSS3
Дефекты
CWE-352