Lucene search

K
cvelistPatchstackCVELIST:CVE-2023-32104
HistoryJul 11, 2023 - 12:49 p.m.

CVE-2023-32104 WordPress MyCurator Content Curation Plugin <= 3.74 is vulnerable to Cross Site Request Forgery (CSRF)

2023-07-1112:49:45
CWE-352
Patchstack
www.cve.org
4
wordpress
mycurator
csrf
vulnerability
3.74
cross site request forgery

CVSS3

4.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

EPSS

0.001

Percentile

17.7%

Cross-Site Request Forgery (CSRF) vulnerability in Mark Tilly MyCurator Content Curation plugin <=Β 3.74 versions.

CNA Affected

[
  {
    "collectionURL": "https://wordpress.org/plugins",
    "defaultStatus": "unaffected",
    "packageName": "mycurator",
    "product": "MyCurator Content Curation",
    "vendor": "Mark Tilly",
    "versions": [
      {
        "changes": [
          {
            "at": "3.75",
            "status": "unaffected"
          }
        ],
        "lessThanOrEqual": "3.74",
        "status": "affected",
        "version": "n/a",
        "versionType": "custom"
      }
    ]
  }
]

CVSS3

4.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

EPSS

0.001

Percentile

17.7%

Related for CVELIST:CVE-2023-32104