Lucene search
HistoryJul 11, 2023 - 1:15 p.m.
CVE-2023-25443
cve-2023-25443
cross-site request forgery
wow-company button generator
button builder plugin
security vulnerability
CVSS3
6.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
AI Score
5.2
Confidence
High
EPSS
0.001
Percentile
17.7%
Cross-Site Request Forgery (CSRF) vulnerability in Wow-Company Button Generator – easily Button Builder plugin <= 2.3.5 versions.
Affected configurations
Node
wow-companybutton_generatorRange≤2.3.5wordpress
| Vendor | Product | Version | CPE |
|---|---|---|---|
| wow-company | button_generator | * | cpe:2.3:a:wow-company:button_generator:*:*:*:*:*:wordpress:*:* |
Related
cve
cve
CVE-2023-25443
2023-07-11 13:15:09
prion
prion
Cross site request forgery (csrf)
2023-07-11 13:15:00
cvelist
cvelist
wordfence
wordfence
CVSS3
6.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
AI Score
5.2
Confidence
High
EPSS
0.001
Percentile
17.7%
Related for NVD:CVE-2023-25443