Lucene search
WPScanCVE-2024-3476HistoryMay 02, 2024 - 6:15 a.m.
CVE-2024-3476
2024-05-0206:15:50
WPScan
web.nvd.nist.gov
36
wordpress
csrf
security vulnerability
admin actions
nvd
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
AI Score
6.7
Confidence
High
EPSS
0
Percentile
9.0%
The Side Menu Lite WordPress plugin before 4.2.1 does not have CSRF checks in some bulk actions, which could allow attackers to make logged in admins perform unwanted actions, such as deleting buttons via CSRF attacks
Affected configurations
Node
wow-estoreside_menuRange<4.2.1litewordpress
| Vendor | Product | Version | CPE |
|---|---|---|---|
| wow-estore | side_menu | * | cpe:2.3:a:wow-estore:side_menu:*:*:*:*:lite:wordpress:*:* |
CNA Affected
[
{
"vendor": "Unknown",
"product": "Side Menu Lite ",
"versions": [
{
"status": "affected",
"versionType": "semver",
"version": "0",
"lessThan": "4.2.1"
}
],
"defaultStatus": "unaffected"
}
]Related
cvelist
cvelist
CVE-2024-3476 Side Menu Lite < 4.2.1 - Menu Deletion via CSRF
2024-05-02 06:00:03
nvd
nvd
CVE-2024-3476
2024-05-02 06:15:50
wpexploit
wpexploit
Side Menu Lite < 4.2.1 - Menu Deletion via CSRF
2024-04-11 00:00:00
vulnrichment
vulnrichment
CVE-2024-3476 Side Menu Lite < 4.2.1 - Menu Deletion via CSRF
2024-05-02 06:00:03
wpvulndb
wpvulndb
Side Menu Lite < 4.2.1 - Menu Deletion via CSRF
2024-04-11 00:00:00
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
AI Score
6.7
Confidence
High
EPSS
0
Percentile
9.0%
Related for CVE-2024-3476