Lucene search
HistoryNov 09, 2023 - 7:15 p.m.
CVE-2023-34182
cross-site request forgery
peter shaw
lh password changer
plugin
1.55 versions
8.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
0.001 Low
EPSS
Percentile
24.3%
Cross-Site Request Forgery (CSRF) vulnerability in Peter Shaw LH Password Changer plugin <= 1.55 versions.
Affected configurations
Node
shawfactorlh-password-changerRange≤1.55wordpress
Related
cve
cve
CVE-2023-34182
2023-11-09 19:15:08
prion
prion
Cross site request forgery (csrf)
2023-11-09 19:15:00
cvelist
cvelist
wordfence
wordfence
8.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
0.001 Low
EPSS
Percentile
24.3%
Related for NVD:CVE-2023-34182