Lucene search

K

CVE-2023-0497

🗓️ 27 Mar 2023 16:08:15Reported by WPScanType 
cve
 cve
🔗 web.nvd.nist.gov👁 37 Views

The HT Portfolio WordPress plugin before 1.1.6 lacks CSRF check, allowing attackers to force logged-in admins to activate arbitrary plugins via CSRF attack

Show more
Related
Detection
Affected
Refs
Nvd
Vulners
Node
hasthemesht_portfolioRange<1.1.6wordpress
[
  {
    "vendor": "Unknown",
    "product": "HT Portfolio",
    "versions": [
      {
        "status": "affected",
        "versionType": "custom",
        "version": "0",
        "lessThan": "1.1.6"
      }
    ],
    "defaultStatus": "unaffected",
    "collectionURL": "https://wordpress.org/plugins"
  }
]

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo
27 Mar 2023 16:15Current
4.5Medium risk
Vulners AI Score4.5
CVSS34.3
EPSS0.001
37
.json
Report