Lucene search
HistoryOct 03, 2023 - 2:15 p.m.
CVE-2023-39158
cross-site request forgery
dotstore banner management
woocommerce plugin
CVSS3
6.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
AI Score
5.2
Confidence
High
EPSS
0.001
Percentile
17.9%
Cross-Site Request Forgery (CSRF) vulnerability in theDotstore Banner Management For WooCommerce plugin <= 2.4.2 versions.
Affected configurations
Node
multidotsbanner_management_for_woocommerceRange≤2.4.2wordpress
| Vendor | Product | Version | CPE |
|---|---|---|---|
| multidots | banner_management_for_woocommerce | * | cpe:2.3:a:multidots:banner_management_for_woocommerce:*:*:*:*:*:wordpress:*:* |
Related
prion
prion
Cross site request forgery (csrf)
2023-10-03 14:15:00
wpvulndb
wpvulndb
vulnrichment
vulnrichment
cvelist
cvelist
cve
cve
CVE-2023-39158
2023-10-03 14:15:10
wordfence
wordfence
CVSS3
6.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
AI Score
5.2
Confidence
High
EPSS
0.001
Percentile
17.9%
Related for NVD:CVE-2023-39158