Lucene search
HistoryMar 01, 2023 - 1:15 p.m.
CVE-2023-23984
cve-2023-23984
csrf
vulnerability
wow-company bubble menu
plugin
5.4 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L
5.5 Medium
AI Score
Confidence
High
0.0005 Low
EPSS
Percentile
16.2%
Cross-Site Request Forgery (CSRF) vulnerability in Wow-Company Bubble Menu – circle floating menu plugin <= 3.0.1 leading to form deletion.
Affected configurations
Node
wow-companybubble_menuRange≤3.0.1
| Vendor | Product | Version | CPE |
|---|---|---|---|
| wow\-company | bubble_menu | * | cpe:2.3:a:wow\-company:bubble_menu:*:*:*:*:*:*:*:* |
CNA Affected
[
{
"collectionURL": "https://wordpress.org/plugins",
"defaultStatus": "unaffected",
"packageName": "bubble-menu",
"product": "Bubble Menu – circle floating menu",
"vendor": "Wow-Company",
"versions": [
{
"changes": [
{
"at": "3.0.2",
"status": "unaffected"
}
],
"lessThanOrEqual": "3.0.1",
"status": "affected",
"version": "n/a",
"versionType": "custom"
}
]
}
]Related
prion
prion
Cross site request forgery (csrf)
2023-03-01 13:15:00
cvelist
cvelist
nvd
nvd
CVE-2023-23984
2023-03-01 13:15:10
wpvulndb
wpvulndb
Bubble Menu - Circle Floating Menu < 3.0.2 - Form Deletion via CSRF
2023-01-20 00:00:00
5.4 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L
5.5 Medium
AI Score
Confidence
High
0.0005 Low
EPSS
Percentile
16.2%
Related for CVE-2023-23984