CVE-2024-2376

🗓️ 03 Jul 2024 06:00:04Reported by WPScanType

The WPQA Builder WordPress plugin before 6.1.1 lacks CSRF checks, enabling attackers to force logged in users to perform unauthorized action

Reporter	Title	Published	Views	Family All 10
CNNVD	WordPress plugin WPQA Builder Cross-Site Request Forgery Vulnerability	3 Jul 202400:00	–	cnnvd
Cvelist	CVE-2024-2376 WPQA < 6.1.1 - Arbitrary Category and Tag Follow/Unfollow via CSRF	3 Jul 202406:00	–	cvelist
NVD	CVE-2024-2376	3 Jul 202406:15	–	nvd
Patchstack	WordPress WPQA plugin < 6.1.1 - Arbitrary Category and Tag Follow/Unfollow via CSRF vulnerability	3 Jul 202406:50	–	patchstack
Patchstack	WordPress WPQA - Builder forms Addon Plugin < 6.1.1 is vulnerable to Cross Site Request Forgery (CSRF)	3 Jul 202400:00	–	patchstack
Positive Technologies	PT-2024-20062 · WordPress · Wpqa Builder	3 Jul 202400:00	–	ptsecurity
RedhatCVE	CVE-2024-2376	7 Jan 202609:19	–	redhatcve
Vulnrichment	CVE-2024-2376 WPQA < 6.1.1 - Arbitrary Category and Tag Follow/Unfollow via CSRF	3 Jul 202406:00	–	vulnrichment
wpexploit	WPQA < 6.1.1 - Arbitrary Category and Tag Follow/Unfollow via CSRF	12 Jun 202400:00	–	wpexploit
WPVulnDB	WPQA < 6.1.1 - Arbitrary Category and Tag Follow/Unfollow via CSRF	12 Jun 202400:00	–	wpvulndb

NVD

Vulners

Vulnrichment

Node

2code wpqa_builderRange<6.1.1wordpress

[
  {
    "vendor": "Unknown",
    "product": "WPQA Builder",
    "versions": [
      {
        "status": "affected",
        "versionType": "semver",
        "version": "0",
        "lessThan": "6.1.1"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

Source	Link
wpscan	www.wpscan.com/vulnerability/bdd2e323-d589-4050-bc27-5edd2507a818/

21 Nov 2024 09:09Current

8.7High risk

Vulners AI Score8.7

CVSS 3.18.8

EPSS0.00435

SSVC

CWE-352