Логотип exploitDog
bind:CVE-2023-0484
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2023-0484

Количество 2

Количество 2

nvd логотип

CVE-2023-0484

почти 3 года назад

The Contact Form 7 Widget For Elementor Page Builder & Gutenberg Blocks WordPress plugin before 1.1.6 does not have CSRF check when activating plugins, which could allow attackers to make logged in admins activate arbitrary plugins present on the blog via a CSRF attack

CVSS3: 4.3
EPSS: Низкий
github логотип

GHSA-mh46-3hw4-j564

почти 3 года назад

The Contact Form 7 Widget For Elementor Page Builder & Gutenberg Blocks WordPress plugin before 1.1.6 does not have CSRF check when activating plugins, which could allow attackers to make logged in admins activate arbitrary plugins present on the blog via a CSRF attack

CVSS3: 4.3
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
nvd логотип
CVE-2023-0484

The Contact Form 7 Widget For Elementor Page Builder & Gutenberg Blocks WordPress plugin before 1.1.6 does not have CSRF check when activating plugins, which could allow attackers to make logged in admins activate arbitrary plugins present on the blog via a CSRF attack

CVSS3: 4.3
0%
Низкий
почти 3 года назад
github логотип
GHSA-mh46-3hw4-j564

The Contact Form 7 Widget For Elementor Page Builder & Gutenberg Blocks WordPress plugin before 1.1.6 does not have CSRF check when activating plugins, which could allow attackers to make logged in admins activate arbitrary plugins present on the blog via a CSRF attack

CVSS3: 4.3
0%
Низкий
почти 3 года назад

Уязвимостей на страницу