Логотип exploitDog
bind:CVE-2023-5882
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2023-5882

Количество 2

Количество 2

nvd логотип

CVE-2023-5882

около 2 лет назад

The Export any WordPress data to XML/CSV WordPress plugin before 1.4.0, WP All Export Pro WordPress plugin before 1.8.6 does not check nonce tokens early enough in the request lifecycle, allowing attackers to make logged in users perform unwanted actions leading to remote code execution.

CVSS3: 8.8
EPSS: Низкий
github логотип

GHSA-7xp2-7hw7-rv8q

около 2 лет назад

The Export any WordPress data to XML/CSV WordPress plugin before 1.4.0, WP All Export Pro WordPress plugin before 1.8.6 does not check nonce tokens early enough in the request lifecycle, allowing attackers to make logged in users perform unwanted actions leading to remote code execution.

CVSS3: 8.8
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
nvd логотип
CVE-2023-5882

The Export any WordPress data to XML/CSV WordPress plugin before 1.4.0, WP All Export Pro WordPress plugin before 1.8.6 does not check nonce tokens early enough in the request lifecycle, allowing attackers to make logged in users perform unwanted actions leading to remote code execution.

CVSS3: 8.8
1%
Низкий
около 2 лет назад
github логотип
GHSA-7xp2-7hw7-rv8q

The Export any WordPress data to XML/CSV WordPress plugin before 1.4.0, WP All Export Pro WordPress plugin before 1.8.6 does not check nonce tokens early enough in the request lifecycle, allowing attackers to make logged in users perform unwanted actions leading to remote code execution.

CVSS3: 8.8
1%
Низкий
около 2 лет назад

Уязвимостей на страницу