Lucene search

K
nvd[email protected]NVD:CVE-2024-3477
HistoryMay 02, 2024 - 6:15 a.m.

CVE-2024-3477

2024-05-0206:15:50
CWE-352
web.nvd.nist.gov
2
wordpress
csrf
popup box

AI Score

6.5

Confidence

High

EPSS

0

Percentile

9.0%

The Popup Box WordPress plugin before 2.2.7 does not have CSRF checks in some bulk actions, which could allow attackers to make logged in admins perform unwanted actions, such as deleting popups via CSRF attacks

AI Score

6.5

Confidence

High

EPSS

0

Percentile

9.0%