Lucene search
HistoryOct 09, 2023 - 6:15 p.m.
CVE-2023-41667
cross-site request forgery
ulf benjaminsson
wp-dtree
4.4.5
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
AI Score
5.8
Confidence
High
EPSS
0.001
Percentile
24.1%
Cross-Site Request Forgery (CSRF) vulnerability in Ulf Benjaminsson WP-dTree plugin <= 4.4.5 versions.
Affected configurations
Node
ulfbenjaminssonwp-dtreeRange≤4.4.5wordpress
| Vendor | Product | Version | CPE |
|---|---|---|---|
| ulfbenjaminsson | wp-dtree | * | cpe:2.3:a:ulfbenjaminsson:wp-dtree:*:*:*:*:*:wordpress:*:* |
Related
cve
cve
CVE-2023-41667
2023-10-09 18:15:10
wpvulndb
wpvulndb
WP-dTree <= 4.4.5 - Settings Update via CSRF
2023-10-10 00:00:00
vulnrichment
vulnrichment
prion
prion
Cross site request forgery (csrf)
2023-10-09 18:15:00
cvelist
cvelist
wordfence
wordfence
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
AI Score
5.8
Confidence
High
EPSS
0.001
Percentile
24.1%
Related for NVD:CVE-2023-41667