Lucene search
HistoryFeb 06, 2023 - 1:15 p.m.
CVE-2022-27628
csrf vulnerability
wzone plugin
lite version
6.5 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
5.4 Medium
AI Score
Confidence
High
0.0005 Low
EPSS
Percentile
17.2%
Cross-Site Request Forgery (CSRF) vulnerability in AA-Team WZone – Lite Version plugin 3.1 Lite versions.
Affected configurations
Node
wzone_projectwzoneMatch3.1litewordpress
Related
cve
cve
CVE-2022-27628
2023-02-06 13:15:08
prion
prion
Cross site request forgery (csrf)
2023-02-06 13:15:00
patchstack
patchstack
cvelist
cvelist
6.5 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
5.4 Medium
AI Score
Confidence
High
0.0005 Low
EPSS
Percentile
17.2%
Related for NVD:CVE-2022-27628