Lucene search
HistoryNov 13, 2023 - 1:15 a.m.
CVE-2023-46638
cve-2023-46638
cross-site request forgery
webcodin wcp
openweather plugin
vulnerability
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS
0.001
Percentile
24.1%
Cross-Site Request Forgery (CSRF) vulnerability in Webcodin WCP OpenWeather plugin <= 2.5.0 versions.
Affected configurations
Node
webcodinwcp_openweatherRange≤2.5.0wordpress
| Vendor | Product | Version | CPE |
|---|---|---|---|
| webcodin | wcp_openweather | * | cpe:2.3:a:webcodin:wcp_openweather:*:*:*:*:*:wordpress:*:* |
Related
cvelist
cvelist
prion
prion
Cross site request forgery (csrf)
2023-11-13 01:15:00
wpvulndb
wpvulndb
WCP OpenWeather <= 2.5.0 - Cross-Site Request Forgery
2023-11-23 00:00:00
vulnrichment
vulnrichment
cve
cve
CVE-2023-46638
2023-11-13 01:15:09
wordfence
wordfence
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS
0.001
Percentile
24.1%
Related for NVD:CVE-2023-46638