Lucene search
PatchstackCVELIST:CVE-2023-46212HistoryDec 18, 2023 - 11:57 p.m.
CVE-2023-46212 WordPress WP EXtra Plugin <= 6.2 is vulnerable to Broken Access Control
2023-12-1823:57:14
CWE-862
CWE-352
Patchstack
www.cve.org
4
wordpress
extra plugin
vulnerable
access control
csrf
CVSS3
6.3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
AI Score
8.9
Confidence
High
EPSS
0.001
Percentile
19.0%
Missing Authorization, Cross-Site Request Forgery (CSRF) vulnerability in TienCOP WP EXtra allows Accessing Functionality Not Properly Constrained by ACLs, Cross Site Request Forgery.This issue affects WP EXtra: from n/a through 6.2.
CNA Affected
[
{
"collectionURL": "https://wordpress.org/plugins",
"defaultStatus": "unaffected",
"packageName": "wp-extra",
"product": "WP EXtra",
"vendor": "TienCOP",
"versions": [
{
"changes": [
{
"at": "6.3",
"status": "unaffected"
}
],
"lessThanOrEqual": "6.2",
"status": "affected",
"version": "n/a",
"versionType": "custom"
}
]
}
]Related
wpvulndb
wpvulndb
WP EXtra < 6.3 - Missing Authorization to Export Settings
2023-11-23 00:00:00
prion
prion
Cross site request forgery (csrf)
2023-12-19 00:15:00
nvd
nvd
CVE-2023-46212
2023-12-19 00:15:07
cve
cve
CVE-2023-46212
2023-12-19 00:15:07
wordfence
wordfence
CVSS3
6.3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
AI Score
8.9
Confidence
High
EPSS
0.001
Percentile
19.0%
Related for CVELIST:CVE-2023-46212