Логотип exploitDog
bind:CVE-2024-8286
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2024-8286

Количество 2

Количество 2

nvd логотип

CVE-2024-8286

9 месяцев назад

The webtoffee-gdpr-cookie-consent WordPress plugin before 2.6.1 does not have CSRF checks in some bulk actions, which could allow attackers to make logged in admins perform unwanted actions, such as deleting visit logs via CSRF attacks

CVSS3: 6.5
EPSS: Низкий
github логотип

GHSA-6925-xwwp-qwh5

9 месяцев назад

The webtoffee-gdpr-cookie-consent WordPress plugin before 2.6.1 does not have CSRF checks in some bulk actions, which could allow attackers to make logged in admins perform unwanted actions, such as deleting visit logs via CSRF attacks

CVSS3: 6.5
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
nvd логотип
CVE-2024-8286

The webtoffee-gdpr-cookie-consent WordPress plugin before 2.6.1 does not have CSRF checks in some bulk actions, which could allow attackers to make logged in admins perform unwanted actions, such as deleting visit logs via CSRF attacks

CVSS3: 6.5
0%
Низкий
9 месяцев назад
github логотип
GHSA-6925-xwwp-qwh5

The webtoffee-gdpr-cookie-consent WordPress plugin before 2.6.1 does not have CSRF checks in some bulk actions, which could allow attackers to make logged in admins perform unwanted actions, such as deleting visit logs via CSRF attacks

CVSS3: 6.5
0%
Низкий
9 месяцев назад

Уязвимостей на страницу