CVE-2023-52128

2024-01-0509:15:09

CWE-352

[email protected]

web.nvd.nist.gov

cve-2023-52128

csrf vulnerability

whitewp white label

wordpress

custom admin

custom login page

custom dashboard

nvd

security vulnerability

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

8.6 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

24.1%

JSON

Cross-Site Request Forgery (CSRF) vulnerability in WhiteWP White Label – WordPress Custom Admin, Custom Login Page, and Custom Dashboard.This issue affects White Label – WordPress Custom Admin, Custom Login Page, and Custom Dashboard: from n/a through 2.9.0.

Affected configurations

Vulners

NVD

Node

whitewpwhite_label_–_wordpress_custom_admin\,_custom_login_page\,_and_custom_dashboardRange≤2.9.0

CPENameOperatorVersion
linksoftwarellc:white_labellinksoftwarellc white labelle2.9.0

CPE	Name	Operator	Version
linksoftwarellc:white_label	linksoftwarellc white label	le	2.9.0

CNA Affected

[
  {
    "collectionURL": "https://wordpress.org/plugins",
    "defaultStatus": "unaffected",
    "packageName": "white-label",
    "product": "White Label – WordPress Custom Admin, Custom Login Page, and Custom Dashboard",
    "vendor": "WhiteWP",
    "versions": [
      {
        "changes": [
          {
            "at": "2.9.1",
            "status": "unaffected"
          }
        ],
        "lessThanOrEqual": "2.9.0",
        "status": "affected",
        "version": "n/a",
        "versionType": "custom"
      }
    ]
  }
]