Lucene search

K
cvelistPatchstackCVELIST:CVE-2024-30521
HistoryMar 29, 2024 - 3:53 p.m.

CVE-2024-30521 WordPress Landingi Landing Pages plugin <= 3.1.1 - Cross Site Request Forgery (CSRF) vulnerability

2024-03-2915:53:06
CWE-352
Patchstack
www.cve.org
3
wordpress
landingi landing pages
csrf

CVSS3

5.4

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L

EPSS

0

Percentile

9.0%

Cross-Site Request Forgery (CSRF) vulnerability in Landingi Landingi Landing Pages.This issue affects Landingi Landing Pages: from n/a through 3.1.1.

CNA Affected

[
  {
    "collectionURL": "https://wordpress.org/plugins",
    "defaultStatus": "unaffected",
    "packageName": "landingi-landing-pages",
    "product": "Landingi Landing Pages",
    "vendor": "Landingi",
    "versions": [
      {
        "changes": [
          {
            "at": "3.1.2",
            "status": "unaffected"
          }
        ],
        "lessThanOrEqual": "3.1.1",
        "status": "affected",
        "version": "n/a",
        "versionType": "custom"
      }
    ]
  }
]

CVSS3

5.4

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L

EPSS

0

Percentile

9.0%

Related for CVELIST:CVE-2024-30521