Lucene search
HistoryNov 20, 2023 - 7:15 p.m.
CVE-2023-4824
security
csrf attack
woohoo newspaper magazine theme
8.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
0.001 Low
EPSS
Percentile
24.3%
The WooHoo Newspaper Magazine theme does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack
Affected configurations
Node
bdaiawoohoo_newspaper_magazine_themeRange≤1.4.3
Related
cvelist
cvelist
wpexploit
wpexploit
WooHoo Newspaper Magazine Theme <= 2.5.3 - Settings Update via CSRF
2023-10-27 00:00:00
prion
prion
Cross site request forgery (csrf)
2023-11-20 19:15:00
cve
cve
CVE-2023-4824
2023-11-20 19:15:09
wpvulndb
wpvulndb
WooHoo Newspaper Magazine Theme <= 2.5.3 - Settings Update via CSRF
2023-10-27 00:00:00
8.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
0.001 Low
EPSS
Percentile
24.3%
Related for NVD:CVE-2023-4824