Логотип exploitDog
bind:CVE-2023-0500
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2023-0500

Количество 2

Количество 2

nvd логотип

CVE-2023-0500

почти 3 года назад

The WP Film Studio WordPress plugin before 1.3.5 does not have CSRF check when activating plugins, which could allow attackers to make logged in admins activate arbitrary plugins present on the blog via a CSRF attack

CVSS3: 6.5
EPSS: Низкий
github логотип

GHSA-f338-4w4q-mmg9

почти 3 года назад

The WP Film Studio WordPress plugin before 1.3.5 does not have CSRF check when activating plugins, which could allow attackers to make logged in admins activate arbitrary plugins present on the blog via a CSRF attack

CVSS3: 6.5
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
nvd логотип
CVE-2023-0500

The WP Film Studio WordPress plugin before 1.3.5 does not have CSRF check when activating plugins, which could allow attackers to make logged in admins activate arbitrary plugins present on the blog via a CSRF attack

CVSS3: 6.5
0%
Низкий
почти 3 года назад
github логотип
GHSA-f338-4w4q-mmg9

The WP Film Studio WordPress plugin before 1.3.5 does not have CSRF check when activating plugins, which could allow attackers to make logged in admins activate arbitrary plugins present on the blog via a CSRF attack

CVSS3: 6.5
0%
Низкий
почти 3 года назад

Уязвимостей на страницу