Lucene search
HistoryNov 13, 2023 - 12:15 a.m.
CVE-2023-27436
cve-2023-27436
cross-site request forgery
louis reingold elegant custom fonts
plugin
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS
0.001
Percentile
24.1%
Cross-Site Request Forgery (CSRF) vulnerability in Louis Reingold Elegant Custom Fonts plugin <= 1.0 versions.
Affected configurations
Node
breakdanceelegant_custom_fontsRange≤1.0wordpress
| Vendor | Product | Version | CPE |
|---|---|---|---|
| breakdance | elegant_custom_fonts | * | cpe:2.3:a:breakdance:elegant_custom_fonts:*:*:*:*:*:wordpress:*:* |
Related
cve
cve
CVE-2023-27436
2023-11-13 00:15:08
vulnrichment
vulnrichment
prion
prion
Cross site request forgery (csrf)
2023-11-13 00:15:00
cvelist
cvelist
wordfence
wordfence
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS
0.001
Percentile
24.1%
Related for NVD:CVE-2023-27436