CVE-2024-3478

2024-05-0206:15:51

WPScan

web.nvd.nist.gov

herd effects

wordpress plugin

csrf attacks

logged in admins

unwanted actions

bulk actions

AI Score

6.7

Confidence

High

EPSS

Percentile

9.0%

JSON

The Herd Effects WordPress plugin before 5.2.7 does not have CSRF checks in some bulk actions, which could allow attackers to make logged in admins perform unwanted actions, such as deleting effects via CSRF attacks

Affected configurations

Vulners

Node

herd_effectsRange<5.2.7wordpress

VendorProductVersionCPE
*herd_effects*cpe:2.3:a:*:herd_effects:*:*:*:*:*:wordpress:*:*

Vendor	Product	Version	CPE
*	herd_effects	*	cpe:2.3:a::herd_effects::::::wordpress::

CNA Affected

[
  {
    "vendor": "Unknown",
    "product": "Herd Effects ",
    "versions": [
      {
        "status": "affected",
        "versionType": "semver",
        "version": "0",
        "lessThan": "5.2.7"
      }
    ],
    "defaultStatus": "unaffected"
  }
]