Lucene search

K
cvelistPatchstackCVELIST:CVE-2023-34013
HistoryNov 13, 2023 - 2:28 a.m.

CVE-2023-34013 WordPress Poll Maker Plugin <= 4.6.2 is vulnerable to Server Side Request Forgery (SSRF)

2023-11-1302:28:32
CWE-918
Patchstack
www.cve.org
5
wordpress poll maker
ssrf vulnerability
version 4.6.2

CVSS3

4.4

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

HIGH

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N

EPSS

0.001

Percentile

37.2%

Server-Side Request Forgery (SSRF) vulnerability in Poll Maker Team Poll Maker – Best WordPress Poll Plugin.This issue affects Poll Maker – Best WordPress Poll Plugin: from n/a through 4.6.2.

CNA Affected

[
  {
    "collectionURL": "https://wordpress.org/plugins",
    "defaultStatus": "unaffected",
    "packageName": "poll-maker",
    "product": "Poll Maker – Best WordPress Poll Plugin",
    "vendor": "Poll Maker Team",
    "versions": [
      {
        "changes": [
          {
            "at": "4.6.3",
            "status": "unaffected"
          }
        ],
        "lessThanOrEqual": "4.6.2",
        "status": "affected",
        "version": "n/a",
        "versionType": "custom"
      }
    ]
  }
]

CVSS3

4.4

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

HIGH

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N

EPSS

0.001

Percentile

37.2%

Related for CVELIST:CVE-2023-34013