Lucene search

[email protected]NVD:CVE-2023-52128

HistoryJan 05, 2024 - 9:15 a.m.

CVE-2023-52128

2024-01-0509:15:09

CWE-352

[email protected]

web.nvd.nist.gov

cve-2023-52128

cross-site request forgery

whitewp white label

wordpress

custom admin

custom login page

custom dashboard

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AI Score

5.7

Confidence

High

EPSS

0.001

Percentile

24.1%

JSON

Cross-Site Request Forgery (CSRF) vulnerability in WhiteWP White Label – WordPress Custom Admin, Custom Login Page, and Custom Dashboard.This issue affects White Label – WordPress Custom Admin, Custom Login Page, and Custom Dashboard: from n/a through 2.9.0.

Affected configurations

Nvd

Node

linksoftwarellcwhite_labelRange≤2.9.0wordpress

VendorProductVersionCPE
linksoftwarellcwhite_label*cpe:2.3:a:linksoftwarellc:white_label:*:*:*:*:*:wordpress:*:*

Vendor	Product	Version	CPE
linksoftwarellc	white_label	*	cpe:2.3:a:linksoftwarellc:white_label::::::wordpress::*

References

patchstack.com/database/vulnerability/white-label/wordpress-white-label-plugin-2-9-0-cross-site-request-forgery-csrf-vulnerability?_s_id=cve

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AI Score

5.7

Confidence

High

EPSS

0.001

Percentile

24.1%

JSON

Related for NVD:CVE-2023-52128

cvelist1 prion1 wpvulndb1 cve1 wordfence1