CVE-2024-9689

Опубликовано: 05 нояб. 2024

Источник: nvd

CVSS3: 4.3

CVSS3: 4.1

EPSS Низкий

Описание

The Post From Frontend WordPress plugin through 1.0.0 does not have CSRF check when deleting posts, which could allow attackers to make logged in admin perform such action via a CSRF attack

Ссылки

https://wpscan.com/vulnerability/ea501d37-1ec2-43ec-873a-ec204e965f60/
Exploit
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:shaon:post_from_frontend:*:*:*:*:*:wordpress:*:*

Версия до 1.0.0 (включая)

EPSS

Процентиль: 40%

0.00185

Низкий

4.3 Medium

CVSS3

4.1 Medium

CVSS3

Дефекты

CWE-352

Связанные уязвимости

GHSA-pcmq-5pjg-9prg

CVSS3: 4.8

github

больше 1 года назад

The Post From Frontend WordPress plugin through 1.0.0 does not have CSRF check when deleting posts, which could allow attackers to make logged in admin perform such action via a CSRF attack

EPSS

Процентиль: 40%

0.00185

Низкий

4.3 Medium

CVSS3

4.1 Medium

CVSS3

Дефекты

CWE-352