Lucene search

CVE-2024-4100

🗓️ 09 Jul 2024 09:05:15Reported by WordfenceType

The Pricing Table plugin for WordPress has a Cross-Site Request Forgery vulnerability in versions up to 2.0.

AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Reporter	Title	Published	Views	Family All 5
Vulnrichment	CVE-2024-4100 Pricing Table <= 2.0.1 - Cross-Site Request Forgery via ajax()	9 Jul 202408:33	–	vulnrichment
Cvelist	CVE-2024-4100 Pricing Table <= 2.0.1 - Cross-Site Request Forgery via ajax()	9 Jul 202408:33	–	cvelist
Patchstack	WordPress Pricing Table Plugin <= 2.0.1 is vulnerable to Cross Site Request Forgery (CSRF)	9 Jul 202400:00	–	patchstack
NVD	CVE-2024-4100	9 Jul 202409:15	–	nvd
Wordfence Blog	Wordfence Intelligence Weekly WordPress Vulnerability Report (July 8, 2024 to July 14, 2024)	18 Jul 202415:33	–	wordfence

Vulners

Vulnrichment

Node

elfsight pricing_tableRange≤2.0.1wordpress

[
  {
    "vendor": "elfsight",
    "product": "Pricing Table",
    "versions": [
      {
        "version": "*",
        "status": "affected",
        "lessThanOrEqual": "2.0.1",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

Source	Link
wordfence	www.wordfence.com/threat-intel/vulnerabilities/id/4cb3d2d4-256c-4128-9397-8b9c7be1b9c8
plugins	www.plugins.trac.wordpress.org/browser/elfsight-pricing-table/trunk/core/includes/widgets-api.php

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

09 Jul 2024 09:15Current

5.4Medium risk

Vulners AI Score5.4

CVSS35.3

EPSS0.00082

SSVC