CVE-2024-3481 Counter Box < 1.2.4 - Counter Deletion via CSRF

2024-05-0206:00:03

WPScan

www.cve.org

cve-2024-3481

counter box

wordpress

csrf

vulnerability

admins

counters

6.7 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.0%

JSON

The Counter Box WordPress plugin before 1.2.4 does not have CSRF checks in some bulk actions, which could allow attackers to make logged in admins perform unwanted actions, such deleting counters via CSRF attacks

CNA Affected

[
  {
    "vendor": "Unknown",
    "product": "Counter Box ",
    "versions": [
      {
        "status": "affected",
        "versionType": "semver",
        "version": "0",
        "lessThan": "1.2.4"
      }
    ],
    "defaultStatus": "unaffected"
  }
]