Lucene search
HistoryApr 15, 2024 - 8:15 a.m.
CVE-2024-32431
wp all import
deserialization
vulnerability
4.4 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
HIGH
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N
4.8 Medium
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
9.0%
Deserialization of Untrusted Data vulnerability in WP All Import Import Users from CSV.This issue affects Import Users from CSV: from n/a through 1.2.
Related
wpvulndb
wpvulndb
Import Users from CSV < 1.3 - Authenticated (Admin+) PHP Object Injection
2024-04-18 00:00:00
cve
cve
CVE-2024-32431
2024-04-15 08:15:15
cvelist
cvelist
wordfence
wordfence
4.4 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
HIGH
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N
4.8 Medium
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
9.0%
Related for NVD:CVE-2024-32431