Lucene search
HistoryMay 02, 2024 - 6:15 a.m.
CVE-2024-3472
cve-2024-3472
csrf attack
wordpress plugin
CVSS3
5.9
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
LOW
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
AI Score
6.4
Confidence
High
EPSS
0
Percentile
9.0%
The Modal Window WordPress plugin before 5.3.10 does not have CSRF check in place when bulk deleting modals, which could allow attackers to make a logged in admin delete them via a CSRF attack
Related
wpexploit
wpexploit
Modal Window < 5.3.10 - Modal Deletion via CSRF
2024-04-11 00:00:00
cvelist
cvelist
CVE-2024-3472 Modal Window < 5.3.10 - Modal Deletion via CSRF
2024-05-02 06:00:02
vulnrichment
vulnrichment
CVE-2024-3472 Modal Window < 5.3.10 - Modal Deletion via CSRF
2024-05-02 06:00:02
wpvulndb
wpvulndb
Modal Window < 5.3.10 - Modal Deletion via CSRF
2024-04-11 00:00:00
cve
cve
CVE-2024-3472
2024-05-02 06:15:50
wordfence
wordfence
CVSS3
5.9
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
LOW
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
AI Score
6.4
Confidence
High
EPSS
0
Percentile
9.0%
Related for NVD:CVE-2024-3472