exploitDog

CVE-2025-23797

Опубликовано: 16 янв. 2025

Источник: nvd

CVSS3: 9.8

EPSS Низкий

Описание

Cross-Site Request Forgery (CSRF) vulnerability in Mike Selander WP Options Editor allows Privilege Escalation.This issue affects WP Options Editor: from n/a through 1.1.

Ссылки

https://patchstack.com/database/wordpress/plugin/wp-options-editor/vulnerability/wordpress-wp-options-editor-plugin-1-1-csrf-to-privilege-escalation-vulnerability?_s_id=cve

EPSS

Процентиль: 24%

0.00084

Низкий

9.8 Critical

CVSS3

Дефекты

CWE-352

Связанные уязвимости

GHSA-r98f-274j-gp4p

CVSS3: 9.8

github

около 1 года назад

Cross-Site Request Forgery (CSRF) vulnerability in Mike Selander WP Options Editor allows Privilege Escalation.This issue affects WP Options Editor: from n/a through 1.1.

EPSS

Процентиль: 24%

0.00084

Низкий

9.8 Critical

CVSS3

Дефекты

CWE-352