Lucene search

PatchstackCVE-2024-33691

HistoryApr 26, 2024 - 1:15 p.m.

CVE-2024-33691

2024-04-2613:15:47

CWE-352

Patchstack

web.nvd.nist.gov

cross-site request forgery

optinmonster

popup builder

vulnerability

nvd

security

CVSS3

4.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

AI Score

4.7

Confidence

High

EPSS

Percentile

9.0%

JSON

Cross-Site Request Forgery (CSRF) vulnerability in OptinMonster Popup Builder Team OptinMonster.This issue affects OptinMonster: from n/a through 2.15.3.

Affected configurations

Vulners

Node

optinmonster_popup_builder_teamoptinmonsterRange≤2.15.3wordpress

VendorProductVersionCPE
optinmonster_popup_builder_teamoptinmonster*cpe:2.3:a:optinmonster_popup_builder_team:optinmonster:*:*:*:*:*:wordpress:*:*

Vendor	Product	Version	CPE
optinmonster_popup_builder_team	optinmonster	*	cpe:2.3:a:optinmonster_popup_builder_team:optinmonster::::::wordpress::*

CNA Affected

[
  {
    "collectionURL": "https://wordpress.org/plugins",
    "defaultStatus": "unaffected",
    "packageName": "optinmonster",
    "product": "OptinMonster",
    "vendor": "OptinMonster Popup Builder Team",
    "versions": [
      {
        "changes": [
          {
            "at": "2.16.0",
            "status": "unaffected"
          }
        ],
        "lessThanOrEqual": "2.15.3",
        "status": "affected",
        "version": "n/a",
        "versionType": "custom"
      }
    ]
  }
]

References

patchstack.com/database/vulnerability/optinmonster/wordpress-popup-builder-by-optinmonster-plugin-2-15-3-cross-site-request-forgery-csrf-notice-dismissal-vulnerability?_s_id=cve

CVSS3

4.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

AI Score

4.7

Confidence

High

EPSS

Percentile

9.0%

JSON

Related for CVE-2024-33691