CVE-2014-3843

2022-10-0316:20:24

CWE-352

[email protected]

web.nvd.nist.gov

cve-2014-3843

cross-site request forgery

csrf

search everything plugin

wordpress

nvd

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

7.4 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

35.5%

JSON

Cross-site request forgery (CSRF) vulnerability in the Search Everything plugin before 8.1.1 for WordPress allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.

Affected configurations

NVD

Node

zemantasearch_everythingRange≤8.1wordpress

zemantasearch_everythingMatch7.0.2wordpress

zemantasearch_everythingMatch7.0.3wordpress

zemantasearch_everythingMatch7.0.4wordpress

zemantasearch_everythingMatch8.0wordpress

AND

wordpresswordpressMatch-

CPENameOperatorVersion
zemanta:search_everythingzemanta search everythingle8.1
zemanta:search_everythingzemanta search everythingeq7.0.2
zemanta:search_everythingzemanta search everythingeq7.0.3
zemanta:search_everythingzemanta search everythingeq7.0.4
zemanta:search_everythingzemanta search everythingeq8.0

CPE	Name	Operator	Version
zemanta:search_everything	zemanta search everything	le	8.1
zemanta:search_everything	zemanta search everything	eq	7.0.2
zemanta:search_everything	zemanta search everything	eq	7.0.3
zemanta:search_everything	zemanta search everything	eq	7.0.4
zemanta:search_everything	zemanta search everything	eq	8.0