Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2023-30616

Опубликовано: 20 апр. 2023
Источник: nvd
CVSS3: 6.5
EPSS Низкий

Описание

Form block is a wordpress plugin designed to make form creation easier. Versions prior to 1.0.2 are subject to a Cross-Site Request Forgery due to a missing nonce check. There is potential for a Cross Site Request Forgery for all form blocks, since it allows to send requests to the forms from any website without a user noticing. Users are advised to upgrade to version 1.0.2. There are no known workarounds for this vulnerability.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:epiph:form_block:*:*:*:*:*:wordpress:*:*
Версия до 1.0.2 (исключая)

EPSS

Процентиль: 49%
0.00258
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-352

EPSS

Процентиль: 49%
0.00258
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-352