Логотип exploitDog
bind:CVE-2024-2405
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2024-2405

Количество 2

Количество 2

nvd логотип

CVE-2024-2405

почти 2 года назад

The Float menu WordPress plugin before 6.0.1 does not have CSRF check in its bulk actions, which could allow attackers to make logged in admin delete arbitrary menu via a CSRF attack.

CVSS3: 4.5
EPSS: Низкий
github логотип

GHSA-mgmj-jff7-4w5p

почти 2 года назад

The Float menu WordPress plugin before 6.0.1 does not have CSRF check in its bulk actions, which could allow attackers to make logged in admin delete arbitrary menu via a CSRF attack.

CVSS3: 4.5
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
nvd логотип
CVE-2024-2405

The Float menu WordPress plugin before 6.0.1 does not have CSRF check in its bulk actions, which could allow attackers to make logged in admin delete arbitrary menu via a CSRF attack.

CVSS3: 4.5
0%
Низкий
почти 2 года назад
github логотип
GHSA-mgmj-jff7-4w5p

The Float menu WordPress plugin before 6.0.1 does not have CSRF check in its bulk actions, which could allow attackers to make logged in admin delete arbitrary menu via a CSRF attack.

CVSS3: 4.5
0%
Низкий
почти 2 года назад

Уязвимостей на страницу