CVE-2023-36693

2023-07-1110:15:10

CWE-352

[email protected]

web.nvd.nist.gov

cve-2023-36693

cross-site request forgery

csrf

alain gonzalez

wp rss images

nvd

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

8.8 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

23.6%

JSON

Cross-Site Request Forgery (CSRF) vulnerability in Alain Gonzalez WP RSS Images plugin <= 1.1 versions.

Affected configurations

Vulners

NVD

Node

alain_gonzalezwp_rss_imagesRange≤1.1

CPENameOperatorVersion
wp_rss_images_project:wp_rss_imageswp rss images project wp rss imagesle1.1

CPE	Name	Operator	Version
wp_rss_images_project:wp_rss_images	wp rss images project wp rss images	le	1.1

CNA Affected

[
  {
    "collectionURL": "https://wordpress.org/plugins",
    "defaultStatus": "unaffected",
    "packageName": "wp-rss-images",
    "product": "WP RSS Images",
    "vendor": "Alain Gonzalez",
    "versions": [
      {
        "lessThanOrEqual": "1.1",
        "status": "affected",
        "version": "n/a",
        "versionType": "custom"
      }
    ]
  }
]