Описание
The Forminator WordPress plugin before 1.24.1 does not use an atomic operation to check whether a user has already voted, and then update that information. This leads to a Race Condition that may allow a single user to vote multiple times on a poll.
Ссылки
- ExploitThird Party Advisory
- ExploitThird Party Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 1.24.1 (исключая)
cpe:2.3:a:incsub:forminator:*:*:*:*:*:wordpress:*:*
EPSS
Процентиль: 21%
0.00069
Низкий
3.1 Low
CVSS3
Дефекты
CWE-362
Связанные уязвимости
CVSS3: 3.1
github
больше 2 лет назад
The Forminator WordPress plugin before 1.24.1 does not use an atomic operation to check whether a user has already voted, and then update that information. This leads to a Race Condition that may allow a single user to vote multiple times on a poll.
EPSS
Процентиль: 21%
0.00069
Низкий
3.1 Low
CVSS3
Дефекты
CWE-362