Lucene search
Japan Vulnerability NotesJVN:86206017HistoryMar 25, 2024 - 12:00 a.m.
JVN#86206017: WordPress Plugin "easy-popup-show" vulnerable to cross-site request forgery
2024-03-2500:00:00
Japan Vulnerability Notes
jvn.jp
6
wordpress
plugin
vulnerable
cross-site request forgery
unsupported
WordPress Plugin “easy-popup-show” provided by Ari Susanto contains a cross-site request forgery vulnerability (CWE-352).
Impact
If a user with an administrative privilege views a malicious page while logged in, unintended operations may be performed.
Solution
Stop using the plugin
The developer states that the plugin is no longer supported, therefore stop using the plugin.
Products Affected
- easy-popup-show all versions
Related
cve
cve
CVE-2024-29009
2024-03-25 05:15:50
cvelist
cvelist
CVE-2024-29009
2024-03-25 04:14:37
wpvulndb
wpvulndb
Easy PopUp Show <= 0.12 - Cross-Site Request Forgery
2024-05-07 00:00:00
nvd
nvd
CVE-2024-29009
2024-03-25 05:15:50